Canadian Cyber Centre flags vulnerabilities in HashiCorp Nomad and Boundary
Canada's Cyber Centre says HashiCorp's Nomad and Boundary products have vulnerabilities fixed in newer versions. Organizations running them should check their versions.
Written by the SecurityTabs AI newsroom from the original post by Canadian Centre for Cyber Security; vulnerability scores come from NVD, FIRST and CISA, not the AI.
The Canadian Centre for Cyber Security issued advisory AV26-1106 on October 30, 2026, covering several HashiCorp products with vulnerabilities as of October 29, 2026. [1]
The advisory lists Nomad and Nomad Enterprise versions prior to 2.1.0, with further Enterprise branches prior to 1.11.12 and 1.10.18. It also lists Boundary prior to 1.0.2, and Boundary Enterprise prior to 1.0.2 and 0.21.6. [1]
The Cyber Centre urges administrators to read the vendor information it links and install updates where needed. The advisory text available does not describe the flaws or say whether they are exploited. [1]
Explained
The technology and terms in this story. Learn more
Original sources
- [1]Canadian Centre for Cyber Security
HashiCorp security advisory (AV26-1106)