CVE-2025-3744 — Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override

CVE-2025-3744

Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override PUBLISHED

Description (CNA)

Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.

Affected (CNA)

Vendor / product	Versions
HashiCorp / Nomad Enterprise	affected 0 before 1.10.1

CWE

CWE-266

References

https://discuss.hashicorp.com/t/hcsec-2025-08-nomad-enterprise-vulnerable-to-violation-of-mandatory-sentinel-policies-in-job-submissions-via-policy-override/74935

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.