CVE-2024-7625

CVE-2024-7625 is a medium-severity vulnerability affecting HashiCorp Nomad and Nomad Enterprise versions 0.6.1 through 1.6.13, 1.7.10, and 1.8.2. It allows for writes outside the intended allocation directory during the archive unpacking process when migrating allocation directories, specifically when multiple archive headers target the same file. The vulnerability has a CVSS score of 5.8, indicating a network attack vector with high privileges required and high attack complexity, leading to a high impact on integrity. While a compromise of the Nomad client agent is a prerequisite, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.