CVE-2025-3744

Publication date

2025-05-13 18:40:08

Family

HashiCorp

State

PUBLISHED

Description

Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.