The Nomad Docker task driver contains a logic flaw that does not enforce the allow_privileged restriction for host namespace mode. This omission permits an authenticated user who can submit or modify a Nomad job to launch a container that shares the host’s namespace. The container thereby gains the same visibility and control as the Nomad client process, enabling it to read or modify the underlying Linux host or to other workloads scheduled on the same client. The vulnerability is an instance of Improper Authorization (CWE-862).

Affected systems include HashiCorp Nomad Community Edition versions prior to 2.0.4 and HashiCorp Nomad Enterprise versions prior to 2.0.4, 1.11.8, and 1.10.14 that are running the Docker driver with host namespace mode enabled on any supported platform

The vulnerability carries a CVSS score of 7.7, indicating high severity. The EPSS score of less than 1% suggests that the likelihood of exploitation is very low, but not zero. It is not listed in the CISA KEV catalog, meaning no widespread exploitation is publicly known. An attacker who is an authenticated Nomad job submitter can create a job payload that requests host‑namespace Docker mode; because the allow_privileged flag is not enforced, the resulting container inherits host privileges, granting it full access to host resources and other workloads on the same client.