HashiCorp Nomad Exec2 Task Driver Arbitrary File Read/Write Vulnerability via Symlink Attack

A vulnerability in HashiCorp Nomad's exec2 task driver, affecting versions prior to 0.1.2, allows for arbitrary file read and write on the client host. This is achieved through a symlink attack, where an attacker can manipulate named pipe symlinks for an allocation's log file. As a result, the attacker gains access to the Nomad host's filesystem with the privileges of the Nomad process user.

Impact

Exploitation of this vulnerability could lead to unauthorized read and write access on the client host's filesystem, potentially allowing for the manipulation of files or creation of malicious payloads.

Remediation

Users are advised to upgrade the exec2 task driver to version 0.1.2 or newer.