Nomad Enterprise (< 1.10.18, 1.11.x < 1.11.12, 2.1.0)

HashiCorp Nomad and Nomad Enterprise contain a symlink following vulnerability that allows malicious workloads to overwrite files outside of their allocation directory, potentially resulting in root-level code execution on the host.