What is GHSA-2cc5-jjc3-x9fw?

GHSA-2cc5-jjc3-x9fw is a security advisory published by GitHub Security Advisories with High severity. HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the...

Which CVE IDs does GHSA-2cc5-jjc3-x9fw cover?

GHSA-2cc5-jjc3-x9fw covers the following CVE IDs: CVE-2026-14373. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2cc5-jjc3-x9fw?

GHSA-2cc5-jjc3-x9fw has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-2cc5-jjc3-x9fwHighCVSS 7.7

HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the...

Vendor

GitHub Security Advisories

Published

July 8, 2026

Last Modified

July 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-14373 →

📋 Description

HashiCorp Nomad and Nomad Enterprise did not enforce the allow_privileged restriction for the Docker task driver's host namespace mode options. This may allow an authenticated job submitter to run a container in a host namespace and access information belonging to the host or to other workloads on the same client. This vulnerability, CVE-2026-14373, is fixed in Nomad Community Edition 2.0.4 and Nomad Enterprise 2.0.4, 1.11.8, and 1.10.14.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-14373
https://discuss.hashicorp.com/t/hcsec-2026-19-nomad-docker-driver-vulnerable-to-host-namespace-bypass-on-linux/77557
https://github.com/advisories/GHSA-2cc5-jjc3-x9fw