
HashiCorp Nomad symlink escape and Boundary SSRF disclosed
Nomad dispatch writes can leave the allocation directory via symlinks, and Boundary has SSRF in its Vault credential store.
2 stories, newest first · one card per story

Nomad dispatch writes can leave the allocation directory via symlinks, and Boundary has SSRF in its Vault credential store.
HashiCorp archived the open-source Boundary privileged-access repository, ending public development.
Today 840 readers · 1.1K views · 843 reads · all time 159K views