← Back

Nomad

nomad

Vendor: Hashicorp • 36 CVEs

CVEs (36)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-4922
1Hashicorp
1Nomad
Jun 17, 2026
Jun 11, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.1...Show more
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14.Show less
CVE-2025-3744
1Hashicorp
1Nomad
Jun 17, 2026
May 13, 2025
N/A· v4
7.6 HIGH· v3
N/A· v2
Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.
CVE-2025-1296
1Hashicorp
1Nomad
Jun 17, 2026
Mar 10, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in N...Show more
Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19.Show less
CVE-2025-0937
1Hashicorp
1Nomad
Jun 17, 2026
Feb 12, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces.
CVE-2024-12678
1Hashicorp
1Nomad
Jun 17, 2026
Dec 20, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed...Show more
Nomad Community and Nomad Enterprise ("Nomad") allocations are vulnerable to privilege escalation within a namespace through unredacted workload identity tokens. This vulnerability, identified as CVE-2024-12678, is fixed in Nomad Community Edition 1.9.4 and Nomad Enterprise 1.9.4, 1.8.8, and 1.7.16.Show less
CVE-2024-10975
1Hashicorp
1Nomad
Jun 17, 2026
Nov 7, 2024
N/A· v4
7.7 HIGH· v3
N/A· v2
Nomad Community and Nomad Enterprise ("Nomad") volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface (CSI) volume writes. This vulnerability, ide...Show more
Nomad Community and Nomad Enterprise ("Nomad") volume specification is vulnerable to arbitrary cross-namespace volume creation through unauthorized Container Storage Interface (CSI) volume writes. This vulnerability, identified as CVE-2024-10975, is fixed in Nomad Community Edition 1.9.2 and Nomad Enterprise 1.9.2, 1.8.7, and 1.7.15.Show less
CVE-2024-7625
1Hashicorp
1Nomad
Jun 17, 2026
Aug 15, 2024
N/A· v4
5.8 MEDIUM· v3
N/A· v2
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when m...Show more
In HashiCorp Nomad and Nomad Enterprise from 0.6.1 up to 1.6.13, 1.7.10, and 1.8.2, the archive unpacking process is vulnerable to writes outside the allocation directory during migration of allocation directories when multiple archive headers target the same file. This vulnerability, CVE-2024-7625, is fixed in Nomad 1.6.14, 1.7.11, and 1.8.3. Access or compromise of the Nomad client agent at the source allocation first is a prerequisite for leveraging this vulnerability.Show less
CVE-2024-6717
1Hashicorp
1Nomad
Jun 17, 2026
Jul 23, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.1...Show more
HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2.Show less
CVE-2024-1329
1Hashicorp
1Nomad
Jun 17, 2026
Feb 8, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329,...Show more
HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1.7.4, 1.6.7, and 1.5.14.Show less
CVE-2023-3300
1Hashicorp
1Nomad
Jun 17, 2026
Jul 20, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4...Show more
HashiCorp Nomad and Nomad Enterprise 0.11.0 up to 1.5.6 and 1.4.1 HTTP search API can reveal names of available CSI plugins to unauthenticated users or users without the plugin:read policy. Fixed in 1.6.0, 1.5.7, and 1.4.1.Show less
CVE-2023-3299
1Hashicorp
1Nomad
Jun 17, 2026
Jul 20, 2023
N/A· v4
2.7 LOW· v3
N/A· v2
HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
CVE-2023-3072
1Hashicorp
1Nomad
Jun 17, 2026
Jul 20, 2023
N/A· v4
3.8 LOW· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11.
CVE-2023-1782
1Hashicorp
1Nomad
Jun 17, 2026
Apr 5, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise versions 1.5.0 up to 1.5.2 allow unauthenticated users to bypass intended ACL authorizations for clusters where mTLS is not enabled. This issue is fixed in version 1.5.3.
CVE-2023-1299
1Hashicorp
1Nomad
Jun 17, 2026
Mar 14, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
CVE-2023-1296
1Hashicorp
1Nomad
Jun 17, 2026
Mar 14, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1.
CVE-2023-0821
1Hashicorp
1Nomad
Jun 17, 2026
Feb 16, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. Fixed in 1.2.16, 1.3.9, and 1.4.4.
CVE-2019-14802
1Hashicorp
1Nomad
Jun 17, 2026
Dec 26, 2022
N/A· v4
5.3 MEDIUM· v3
N/A· v2
HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/...Show more
HashiCorp Nomad 0.5.0 through 0.9.4 (fixed in 0.9.5) reveals unintended environment variables to the rendering task during template rendering, aka GHSA-6hv3-7c34-4hx8. This applies to nomad/client/allocrunner/taskrunner/template.Show less
CVE-2022-3867
1Hashicorp
1Nomad
Jun 17, 2026
Nov 10, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 event stream subscribers using a token with TTL receive updates until token garbage is collected. Fixed in 1.4.2.
CVE-2022-3866
1Hashicorp
1Nomad
Jun 17, 2026
Nov 10, 2022
N/A· v4
4.3 MEDIUM· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.4.1 workload identity token can list non-sensitive metadata for paths under nomad/ that belong to other jobs in the same namespace. Fixed in 1.4.2.
CVE-2022-41606
1Hashicorp
1Nomad
Jun 17, 2026
Oct 12, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
HashiCorp Nomad and Nomad Enterprise 1.0.2 up to 1.2.12, and 1.3.5 jobs submitted with an artifact stanza using invalid S3 or GCS URLs can be used to crash client agents. Fixed in 1.2.13, 1.3.6, and 1.4.0.