GO-2025-3758

vendorUSosv

Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

view advisory published 2025-07-28Licence: per source

Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-4922US	—	0.51% (43rd)	—	2025-06-11
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922,…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.