Hashicorp Nomad Enterprise Vulnerabilities
Hashicorp Nomad Enterprise vulnerabilities.
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
ACL Policy Lookup Issue in Nomad Community and Nomad Enterprise
CVE-2025-4922HashicorpNomad8.1HIGHBypassing Sentinel Policies in Nomad Enterprise by HashiCorp
CVE-2025-3744HashicorpNomad Enterprise7.6HIGHToken Exposure Vulnerability in Nomad Community and Enterprise by HashiCorp
CVE-2025-1296HashicorpNomad6.5MEDIUMEvent Stream Namespace ACL Policy Bypass in Nomad by HashiCorp
CVE-2025-0937HashicorpNomad7.1HIGHPrivilege Escalation Vulnerability in HashiCorp Nomad Allocations
CVE-2024-12678HashicorpNomad6.5MEDIUMArbitrary Cross-Namespace Volume Creation Vulnerability
CVE-2024-10975HashicorpNomad7.7HIGHNomad Archives Vulnerability: Write Access Outside Allocation Directory
CVE-2024-7625HashicorpNomad5.8MEDIUMNomad Platform Vulnerable to Path Escape During Migration
CVE-2024-6717HashicorpNomad7.7HIGHNomad Client User Arbitrary File Write Vulnerability
CVE-2024-1329HashicorpNomad7.5HIGHNomad ACL Policies without Label are Applied to Unexpected Resources
CVE-2023-3072HashicorpNomad4.1MEDIUMNomad Caller ACL Token's Secret ID is Exposed to Sentinel
CVE-2023-3299HashicorpNomad Enterprise3.4LOWNomad Search API Leaks Information About CSI Plugins
CVE-2023-3300HashicorpNomad5.3MEDIUMNomad Unauthenticated Client Agent HTTP Request Privilege Escalation
CVE-2023-1782HashicorpNomad10CRITICALNomad ACLs Can Not Deny Access to Workload's Own Variables
CVE-2023-1296HashicorpNomad2.7LOWNomad Job Submitter Privilege Escalation Using Workload Identity
CVE-2023-1299HashicorpNomad7.4HIGHNomad Client Vulnerable to Decompression Bombs in Artifact Block
CVE-2023-0821HashicorpNomad6.5MEDIUMNomad Event Stream Subscriber Using a Token with TTL Receives Updates Until Garbage Collected
CVE-2022-3867HashicorpNomad2.7LOWNomad Workload Identity Token Can List Non-sensitive Metadata for Paths Under nomad/
CVE-2022-3866HashicorpNomad5MEDIUM