HashiCorp Nomad and Nomad Enterprise 0.9.2 through 1.0.17, 1.1.11, and 1.2.5 allow operators with read-fs and alloc-exec (or job-submit) capabilities to read arbitrary files on the host filesystem as root.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nomad | Hashicorp | 0.9.2 (including) | 1.0.18 (excluding) |
| Nomad | Hashicorp | 1.1.0 (including) | 1.1.12 (excluding) |
| Nomad | Hashicorp | 1.2.0 (including) | 1.2.6 (excluding) |
| Nomad | Ubuntu | bionic | * |
| Nomad | Ubuntu | trusty | * |
| Nomad | Ubuntu | xenial | * |