HashiCorp Nomad FIFO symlink attack (CVE-2026-6959, CVE-2026-8052)

CVE-2026-6959 and CVE-2026-8052 A task container can replace the FIFO used for log streaming with a symlink to any host file. When the task restarts, logmon follows the symlink and reads or writes the target as the Nomad process user.