CVE-2020-27195: 
Nomad vulnerability analysis and mitigation

HashiCorp Nomad and Nomad Enterprise version 0.9.0 up to 0.12.5 contained a vulnerability where the client file sandbox feature could be subverted using either the template or artifact stanzas. The vulnerability was fixed in versions 0.12.6, 0.11.5, and 0.10.6 (Nomad Changelog, NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.1 (CRITICAL) with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N. This indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges or user interaction, and can result in high impact to both confidentiality and integrity (NVD).

The vulnerability allows attackers to bypass the client file sandbox feature, potentially leading to unauthorized access and modification of files on the system. The CVSS score indicates high impact on both confidentiality and integrity of the system, though availability is not affected (NVD).

The vulnerability is exploitable over the network with low attack complexity and requires no special privileges or user interaction. The attack can be conducted remotely, making it particularly dangerous in exposed environments (NVD).

The recommended mitigation is to upgrade to the fixed versions: Nomad 0.12.6, 0.11.5, or 0.10.6. These versions contain the necessary security patches to address the vulnerability (Nomad Changelog).