← Database

CVE-2023-1299

HIGH CVSS: 7.4 Published: 2023-03-14 Modified: 2026-06-17

Description

HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.

Affected Platforms

Hashicorp Nomad

Weakness Type

CWE-862, NVD-CWE-noinfo

References