GO-2024-3262

Affected Products

Timeline

• Nov 8, 2024 CVE Published
• Mar 3, 2026 CVE Updated

References

• https://github.com/advisories/GHSA-2w5v-x29g-jw7j advisory
• https://github.com/hashicorp/nomad/commit/30849c518e16647a4f698e5f5cc82bef2bf40e4d patch
• https://discuss.hashicorp.com/t/hcsec-2024-27-nomad-vulnerable-to-cross-namespace-volume-creation-abusing-csi-write-permission url