← CVE Intelligence

CVE-2025-4922

Nomad Vulnerable To Incorrect ACL Policy Lookup Attached To A Job PUBLISHED

Description (CNA)

Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14.

Affected (CNA)

Vendor / productVersions
HashiCorp / Nomadaffected 1.4.0 before 1.10.2
HashiCorp / Nomad Enterpriseaffected 1.4.0 before 1.10.2

CWE

CWE-266

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.