# Nomad v2.0.1

- Product: Nomad (https://whatsnew.fyi/product/nomad)
- Vendor: HashiCorp
- Date: 2026-05-12
- Version: v2.0.1
- Original notes: https://github.com/hashicorp/nomad/releases/tag/v2.0.1
- Permalink: https://whatsnew.fyi/product/nomad/releases/v2.0.1

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **removed** — Allocation logs directory is now bind-mounted read-only for task drivers that support filesystem isolation
- **security** — Prevent unintended code execution outside the plugin directory in dynamic host volumes (CVE-2026-7474)
- **security** — Protect logging FIFO from symlink swap attacks (CVE-2026-6959)
- **security** — Require sentinel-override ACL capability for overriding soft-mandatory policies on volumes
- **changed** — Upgraded Ember to 6.10
- **added** — Add "latest" flag for tagging the latest version of a job
- **changed** — Update Go toolchain to 1.26.3
- **added** — Add retry for nomad job run monitoring
- **changed** — Automatically expand `nomad exec -it` to `-i -t`
- **changed** — Job plan now propagates `-hcl2-strict=false` into the suggested `nomad job run -check-index` invocation when the user passed it on the plan command line
- **added** — Add monitoring and verbose option to job dispatch
- **changed** — Include volume RequestName within mount config information if available
- **added** — Add a configuration field for the number of nodes that the scheduler considers when spread or affinity is in use
- **changed** — RPC dial timeout is configurable
- **added** — Warn on job submit when job has services but no shutdown_delay
- **fixed** — Fix a bug where the Create Job, Update Job, and Scale Job APIs could fail to respect EnforceIndex under concurrent requests
- **fixed** — Avoid setting job to dead while waiting for allocations to reschedule
- **fixed** — Improve check of StagePublishBaseDir being subdirectory of MountDir
- **fixed** — Reset ProgressDeadline after pausing deployments and do not fail while paused
- **fixed** — Kill plugin instance on dispense failure

BREAKING CHANGES:

* logging: The allocation logs directory is bind-mounted read-only for task drivers that support with filesystem isolation [[GH-27918](https://github.com/hashicorp/nomad/issues/27918)]

SECURITY:

* dynamic host volumes: Prevent unintended code execution outside the plugin directory (CVE-2026-7474) [[GH-27919](https://github.com/hashicorp/nomad/issues/27919)]
* logging: Protect logging FIFO from symlink swap attacks (CVE-2026-6959) [[GH-27918](https://github.com/hashicorp/nomad/issues/27918)]
* sentinel: require sentinel-override ACL capability for overriding soft-mandatory policies on volumes
* ui: Upgraded Ember to 6.10 [[GH-27674](https://github.com/hashicorp/nomad/issues/27674)]

IMPROVEMENTS:

* api: Add "latest" flag for tagging the latest version of a job [[GH-27764](https://github.com/hashicorp/nomad/issues/27764)]
* build: Update Go toolchain to 1.26.3 [[GH-27924](https://github.com/hashicorp/nomad/issues/27924)]
* cli: Added retry for nomad job run monitoring [[GH-27887](https://github.com/hashicorp/nomad/issues/27887)]
* cli: Automatically expand `nomad exec -it` to `-i -t` [[GH-27906](https://github.com/hashicorp/nomad/issues/27906)]
* cli: `job plan` now propagates `-hcl2-strict=false` into the suggested `nomad job run -check-index` invocation when the user passed it on the plan command line [[GH-23656](https://github.com/hashicorp/nomad/issues/23656)]
* cli: add monitoring and verbose option to job dispatch [[GH-27541](https://github.com/hashicorp/nomad/issues/27541)]
* drivers: include volume RequestName within mount config information if available [[GH-27710](https://github.com/hashicorp/nomad/issues/27710)]
* scheduler: Add a configuration field for the number of nodes that the scheduler considers when spread or affinity is in use. This can improve scheduler performance for some cluster shapes. [[GH-27650](https://github.com/hashicorp/nomad/issues/27650)]
* server: RPC dial timeout is configurable [[GH-27862](https://github.com/hashicorp/nomad/issues/27862)]
* services: warn on job submit when job has services but no shutdown_delay [[GH-27782](https://github.com/hashicorp/nomad/issues/27782)]

BUG FIXES:

* api: Fix a bug where the Create Job, Update Job, and Scale Job APIs could fail to respect EnforceIndex under concurrent requests [[GH-27832](https://github.com/hashicorp/nomad/issues/27832)]
* core: avoid setting job to dead while waiting for allocations to reschedule [[GH-27852](https://github.com/hashicorp/nomad/issues/27852)]
* csi: improve check of StagePublishBaseDir being subdirectory of MountDir [[GH-27717](https://github.com/hashicorp/nomad/issues/27717)]
* deployments: reset ProgressDeadline after pausing and do not fail while paused [[GH-27804](https://github.com/hashicorp/nomad/issues/27804)]
* drivers: kill plugin instance on dispense failure [[GH-27711](https://github.com/hashicorp/nomad/issues/27711)]
* job (Enterprise): Renabled use of multiple vault namespaces in a single job
* plugins: Fixed a bug where plugin clients would continuously leak file descriptors when the agent was restarted [[GH-27885](https://github.com/hashicorp/nomad/issues/27885)]
* scheduler: Fixed a bug where preemption of allocations by tasks that require devices could incorrectly fail placement [[GH-27880](https://github.com/hashicorp/nomad/issues/27880)]