{"action":"Upgrade github.com/hashicorp/nomad-driver-exec2 to 0.1.2 or later.","affected":[{"fixed":"0.1.2","introduced":"0"}],"component":"github.com/hashicorp/nomad-driver-exec2","cve_ids":["CVE-2026-8052"],"ecosystem":"Go","epss":0.00129,"exploited":false,"fixed_versions":["0.1.2"],"ghsa_id":"GHSA-wqwc-x3rc-2xw6","id":"tcs_01M5KFR2BX27V646MFMY4H1Q4N","modified_at":"2026-06-25T23:11:21.489390460Z","published_at":"2026-05-12T21:31:35Z","references":["https://osv.dev/vulnerability/GHSA-wqwc-x3rc-2xw6","https://nvd.nist.gov/vuln/detail/CVE-2026-8052","https://discuss.hashicorp.com/t/hcsec-2026-13-nomads-exec2-task-driver-vulnerable-to-arbitrary-file-read-write-on-client-host-through-symlink-attack/77415","https://github.com/hashicorp/nomad-driver-exec2","https://github.com/hashicorp/nomad-driver-exec2/releases/tag/v0.1.2"],"severity":{"label":"medium","score":6},"sources":[{"source":"osv","source_id":"GHSA-wqwc-x3rc-2xw6","url":"https://osv.dev/vulnerability/GHSA-wqwc-x3rc-2xw6"}],"summary":"HashiCorp Nomad’s exec2 task driver vulnerable to a symlink attack"}