← Database

CVE-2025-3744

HIGH CVSS: 7.6 Published: 2025-05-13 Modified: 2026-06-17

Description

Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.

Affected Platforms

Hashicorp Nomad

Weakness Type

CWE-266, NVD-CWE-noinfo

References