CVE-2024-6717

—

CVSS 3.1

8.6 high

EPSS

<1%p32

Published

Jul 23, 2024 (Jul 23, 2024)

Modified

Jun 17, 2026

Description

HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.

Vendors: hashicorp
Products: nomad
Weakness: CWE-610
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.