{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "Nomad HTTP API job submission (POST /v1/jobs) of a Docker-driver task with a bind mount whose source path is lexically contained in the allocation directory but resolves via a planted symlink to the host root; volume bind mounts disabled",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "nomad-agent-server+client",
    "docker-task-driver",
    "docker-daemon-rootless"
  ],
  "target_identity": {
    "repository_url": "https://github.com/hashicorp/nomad",
    "commit_sha": "a2a5fee9c42d6481adcb9be865bcbccf8fd4d725",
    "target_digest": "5f59b851d5c5222e8ad738182f21e4a0f10cde8f4e87c11d56d1ae7d3455aad9",
    "runtime_digest": "7f1d3e1e49566ed6c6239c16d3fe1d29af362904408b4d01c3f64fc630022156",
    "platform": "linux",
    "architecture": "x86_64"
  },
  "proof_artifacts": [
    "repro/artifacts/vuln1/job_request.json",
    "repro/artifacts/vuln1/job_submit_response.json",
    "repro/artifacts/vuln1/alloc_detail.json",
    "repro/artifacts/vuln1/escape_task_events.txt",
    "repro/artifacts/vuln1/escape_task_stdout.log",
    "repro/artifacts/vuln1/prep_task_stdout.log",
    "repro/artifacts/vuln1/host_marker.txt",
    "repro/artifacts/vuln1/attempt_summary.txt",
    "repro/artifacts/vuln1/agent_attempt.log",
    "repro/artifacts/vuln2/job_request.json",
    "repro/artifacts/vuln2/job_submit_response.json",
    "repro/artifacts/vuln2/alloc_detail.json",
    "repro/artifacts/vuln2/escape_task_events.txt",
    "repro/artifacts/vuln2/escape_task_stdout.log",
    "repro/artifacts/vuln2/prep_task_stdout.log",
    "repro/artifacts/vuln2/host_marker.txt",
    "repro/artifacts/vuln2/attempt_summary.txt",
    "repro/artifacts/vuln2/agent_attempt.log",
    "repro/artifacts/fixed1/job_request.json",
    "repro/artifacts/fixed1/job_submit_response.json",
    "repro/artifacts/fixed1/alloc_detail.json",
    "repro/artifacts/fixed1/escape_task_events.txt",
    "repro/artifacts/fixed1/escape_task_stdout.log",
    "repro/artifacts/fixed1/prep_task_stdout.log",
    "repro/artifacts/fixed1/attempt_summary.txt",
    "repro/artifacts/fixed1/agent_attempt.log",
    "repro/artifacts/fixed2/job_request.json",
    "repro/artifacts/fixed2/job_submit_response.json",
    "repro/artifacts/fixed2/alloc_detail.json",
    "repro/artifacts/fixed2/escape_task_events.txt",
    "repro/artifacts/fixed2/escape_task_stdout.log",
    "repro/artifacts/fixed2/prep_task_stdout.log",
    "repro/artifacts/fixed2/attempt_summary.txt",
    "repro/artifacts/fixed2/agent_attempt.log"
  ],
  "artifact_sha256": {
    "repro/artifacts/vuln1/job_request.json": "e423d3df49c4ba630114213eebb80150634acebcc7d127c522185e83384b4797",
    "repro/artifacts/vuln1/job_submit_response.json": "6ad769a8b1944fe66d08142f22396f9e5f0f2a5b83d9145b5276104272445e41",
    "repro/artifacts/vuln1/alloc_detail.json": "f98990991a0312606f115ba883f4058bc21426910405c10665cb32ca67ccec48",
    "repro/artifacts/vuln1/escape_task_events.txt": "5f9afc45002a150e7e0e33877a7c27935a7be5cf0ea38a3a886126dbb014ae36",
    "repro/artifacts/vuln1/escape_task_stdout.log": "ef04a4c333b987e9d28575e6e7d929256e460c3304abf173c02b18841982b9e1",
    "repro/artifacts/vuln1/prep_task_stdout.log": "907a378797de7950bff5ffcc90e5731231ddc5239f67bd819309c8060a1931c3",
    "repro/artifacts/vuln1/host_marker.txt": "6bef3d9c94c96e2f499873b67be69ef639afea53cdc145762d71efcd3b9d464c",
    "repro/artifacts/vuln1/attempt_summary.txt": "c0ad53f84275750df8af828707f5601aca48673ab696946076c07037e0a39fab",
    "repro/artifacts/vuln1/agent_attempt.log": "880a0e456c9e66a1bb24259b3bfd2b612871df90d1691966810e541b467726ff",
    "repro/artifacts/vuln2/job_request.json": "6854efe33b1701d62c2871a668594271851abb8cdb09d0936e35d20ec41a7399",
    "repro/artifacts/vuln2/job_submit_response.json": "5d25814bee69a7f1147dd6244313e26e34ce38c2739c487689c9aca9ae6fa408",
    "repro/artifacts/vuln2/alloc_detail.json": "6fc95c89507144d94b06b36c2400c2c162625ef03c28999f814eded913325159",
    "repro/artifacts/vuln2/escape_task_events.txt": "c56477fb3f0189134d2e2f3a9bf1607975a83cf18e78a610c03816ab97a772ac",
    "repro/artifacts/vuln2/escape_task_stdout.log": "3b174bf0f766b70f45b2ca755403ae081595d0e7bbe1dcf6cf1018ec5197928e",
    "repro/artifacts/vuln2/prep_task_stdout.log": "12044b652acd32622fa0a30d4c5647094c20f83f895124975c7011ae10d83a9b",
    "repro/artifacts/vuln2/host_marker.txt": "abc9082dbfcfe2c91722092f26b09c645a8999e5740edc587d571cf6b177a8a4",
    "repro/artifacts/vuln2/attempt_summary.txt": "3a5830baad24227daa6dade9978f732dc0104e231e4023cbb482fbb4ee5d300b",
    "repro/artifacts/vuln2/agent_attempt.log": "843a4a3214988a5877a4392c4dd23b6b610f78965caf6b1816cac40ab7292549",
    "repro/artifacts/fixed1/job_request.json": "0b23c4f693ebf9dc712556e156af65f2e6cf99f9b2fbb96d0dfd522992167f81",
    "repro/artifacts/fixed1/job_submit_response.json": "4e70fd70ed2db38f417671e4dc7bab2db4b32649ee947b26e989df9efb834f6f",
    "repro/artifacts/fixed1/alloc_detail.json": "64209aef2166c63bff9555364529650c537f3e3667d30abd2186a47736fde986",
    "repro/artifacts/fixed1/escape_task_events.txt": "44de07dc72508ef0132559fa1ac38c4fb9d436a50e199666ef366ecfa2d5be0a",
    "repro/artifacts/fixed1/escape_task_stdout.log": "4770279c3594966f3efef2d281a66030b82c82495ae18ce69509b742d4fea73d",
    "repro/artifacts/fixed1/prep_task_stdout.log": "12044b652acd32622fa0a30d4c5647094c20f83f895124975c7011ae10d83a9b",
    "repro/artifacts/fixed1/attempt_summary.txt": "954c38fb05c621f832c00ee7d46059cb1cf4ad2c38c8cb17fe097af86d386134",
    "repro/artifacts/fixed1/agent_attempt.log": "5294b523717fd714fc4d27ea3ddc12e1ba1d8a377a4155ad29f04738fc075ad5",
    "repro/artifacts/fixed2/job_request.json": "1c1de93653511bf1ee2a845792d3c79ab80d5e06d276397eecdb13b9e33493e0",
    "repro/artifacts/fixed2/job_submit_response.json": "be7727990d9fd9fcd4666c27f20d5e374b5729bef994055da4dce32e4cd2c4af",
    "repro/artifacts/fixed2/alloc_detail.json": "c672f67bcaae97e121d72e8c5ea104dc87a2c3957cddba9ad6ecea6461207991",
    "repro/artifacts/fixed2/escape_task_events.txt": "00dc50aca6f79452075ae05eaf63bacf1bd388b525b0b1202a7dd410c5131447",
    "repro/artifacts/fixed2/escape_task_stdout.log": "4770279c3594966f3efef2d281a66030b82c82495ae18ce69509b742d4fea73d",
    "repro/artifacts/fixed2/prep_task_stdout.log": "12044b652acd32622fa0a30d4c5647094c20f83f895124975c7011ae10d83a9b",
    "repro/artifacts/fixed2/attempt_summary.txt": "8a447cd26fc06f23cf44793fc05a09d19ac4dbcf7e28f50dd00b1bed321c38d1",
    "repro/artifacts/fixed2/agent_attempt.log": "89ab16c2df941bf24a69ee5c8aad16cc5b3811a0f0663d1ed67cd77d7b6c04c1"
  },
  "notes": "vuln_results=escaped,escaped fixed_results=blocked,blocked; vulnerable Nomad 2.0.3 (tag v2.0.3, commit a2a5fee9c42d6481adcb9be865bcbccf8fd4d725, binary sha256 7f1d3e1e49566ed6c6239c16d3fe1d29af362904408b4d01c3f64fc630022156) accepted the symlink-escaped bind mount, mounted the docker-daemon host root read-write into the task container, read host /etc/hostname (daemon host fc9e2e9012df), and wrote host markers under /workspace/host-escape-zone outside the allocation directory; fixed Nomad 2.0.4 (tag v2.0.4, commit 5b83b133998a1f514beb81019930fb673b5ed669, binary sha256 f22cf977f100f938e0056cef4b4717288b5da1ecb0bb8d69cc2f563f82e63f43) rejects the identical job with 'volumes are not enabled; cannot mount host path' and creates no marker"
}