HashiCorp security advisory (AV26-1106)

Serial Number: AV26-1106 Date: October 30, 2026 As of October 29, 2026, HashiCorp is affected by vulnerabilities in the following products: Nomad Prior to 2.1.0 Nomad Enterprise Prior to 2.1.0 Prior to 1.11.12 Prior to 1.10.18 Boundary Prior to 1.0.2 Boundary Enterprise Prior to 1.0.2 and 0.21.6 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. HCSEC-2026-52 - Nomad dispatch payload writes can escape the allocation directory through symlinks HCSEC-2026-54 - Boundary vulnerable to server-side request f