Executive brief
HashiCorp Nomad vulnerable to non-sensitive metadata exposure in github.com/hashicorp/nomad
Affected products
- Go github.com/hashicorp/nomad
Junglewise Threat Intelligence
CVE-2022-3866: GO-2022-1105 - HashiCorp Nomad vulnerable to non-sensitive metadata exposure in github.com/hashicorp/nomad
CVE-2022-3866 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/hashicorp/nomad (Go). Vendors: Go.
Related threats
- HashiCorp Nomad path traversal in Dynamic Host Volumes
- HashiCorp Nomad arbitrary file read and write via symlink attack
- GO-2026-4278 - HashiCorp Nomad is vulnerable to path escape through archive unpacking during migration in github.com/hashicorp/nomad
- GO-2025-3758 - Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad
- GO-2025-3510 - Unintentional exposure of the workload identity token and client secret in logs in github.com/hashicorp/nomad