What is the CVSS score of CVE-2026-14891?

CVE-2026-14891 has a CVSS 3.1 base score of 8.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N. EPSS exploitation probability: 0.3%.

Which versions of HashiCorp Nomad are affected by CVE-2026-14891?

A high-severity container security flaw in HashiCorp Nomad (Community and Enterprise editions) allows users with job submission permissions to directly access and modify files on the underlying host…. A patch is available.

How to fix or mitigate CVE-2026-14891?

Within 24 hours: inventory all Nomad deployments and current versions in use. Within 7 days: disable Docker task driver or restrict job submission access to trusted teams only. Within 30 days: upgrade to Nomad 2.0.4 (CE), 2.0.4 (Enterprise), 1.11.8, or 1.10.14 depending on your deployed version.

HashiCorp Nomad CVE-2026-14891

EUVD-2026-42345 HIGH

Improper Link Resolution Before File Access (CWE-59)

2026-07-08 security@hashicorp.com

GHSA-5c56-jfhx-4gcm

Hashicorp Information Disclosure Docker

8.7

CVSS 3.1 · Vendor: hashicorp

Severity by source

Vendor (hashicorp) PRIMARY

8.7 HIGH

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

vuln.today AI

8.7 HIGH

Job submission over the network API needs a privileged submit-job token (PR:H, AV:N, AC:L); container-to-host escape is a scope change (S:C) yielding host read/write (C:H/I:H) with no availability impact.

3.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N

Primary rating from Vendor (hashicorp).

CVSS VectorVendor: hashicorp

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Patch available

Jul 08, 2026 - 21:04 EUVD

Analysis Generated

Jul 08, 2026 - 20:40 vuln.today

DescriptionCVE.org

HashiCorp Nomad and Nomad Enterprise are vulnerable to a sandbox escape in the Docker task driver that may allow a job submitter to bind-mount a host path into a container even when volume bind mounts are disabled, potentially leading to reading and writing files on the host. This vulnerability, CVE-2026-14891, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

Articles & Coverage 2

News 4 New HashiCorp Vulnerabilities - 1 Critical, 3 High, 1 With POC Jul 09, 2026 News 4 New Docker Vulnerabilities - 1 Critical, 3 High, 1 With POC Jul 09, 2026

AnalysisAI

Container-to-host sandbox escape in HashiCorp Nomad and Nomad Enterprise lets an authenticated job submitter using the Docker task driver bind-mount an arbitrary host path into their container even when volume bind mounts are administratively disabled, enabling read and write access to files on the underlying host. The scope-changing flaw (CVSS 3.1 8.7) affects the Community and Enterprise editions and is fixed in Nomad 2.0.4 (CE), and Enterprise 2.0.4, 1.11.8, and 1.10.14. There is no public exploit identified at time of analysis and it is not on CISA KEV.

Technical ContextAI

Nomad is HashiCorp's workload orchestrator that schedules and runs jobs across a cluster; the Docker task driver launches those jobs as Docker containers on client nodes. Operators can harden the driver by disabling volume/bind mounts so that job authors cannot map host filesystem paths into containers. The root cause maps to CWE-59 (Improper Link Resolution Before File Access / 'Link Following'), meaning the driver's mount handling can be tricked - typically via symlink or path-resolution abuse - into resolving a mount source to a host path that the disable-bind-mount control was intended to forbid, allowing the container to reach the host filesystem. No CPE strings were supplied in the input; affected products are identified from the description and vendor advisory text rather than NVD CPE data.

RemediationAI

Vendor-released patch: upgrade to Nomad Community Edition 2.0.4, or Nomad Enterprise 2.0.4, 1.11.8, or 1.10.14 depending on your release line, per HashiCorp advisory HCSEC-2026-21 (https://discuss.hashicorp.com/t/hcsec-2026-21-nomad-vulnerable-to-sandbox-escape-in-docker-task-driver/77561). Because the bypass defeats the disable-bind-mounts control itself, that setting cannot be relied upon as a workaround. Until patching, reduce exposure by tightening Nomad ACLs so that only trusted principals hold the submit-job capability, restricting or disabling the Docker task driver on sensitive client nodes, and isolating clients that run untrusted or multi-tenant workloads onto dedicated hosts so a host-file compromise cannot reach sensitive data or other tenants; note these controls constrain who can schedule work and may disrupt legitimate deployment pipelines. Review job specifications for unexpected mount or symlink usage as a detection measure.