HashiCorp fixes Nomad symlink escape and Boundary SSRF flaws in new security advisory
VULNERABILITYCanadian Centre for Cyber Securityredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
The Canadian Centre for Cyber Security has published advisory AV26-1106 covering HashiCorp vulnerabilities as of 29 October 2026. HCSEC-2026-52 affects Nomad, where dispatch payload writes can escape the allocation directory through symlinks. HCSEC-2026-54 affects Boundary, which is vulnerable to server-side request forgery in the Vault credential store. Administrators should review the vendor advisories and apply updates.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Check whether you use the affected product, and install the vendor’s fix when it is available. Open your watchlist
General advice for this kind of story
Full story timeline · 2 updates
Who reported · 1 outlet
Canadian Centre for Cyber Security
Who and what is in it
Companies