CVE-2025-4922 | BDVDB-2026-282249 Detail
HashiCorpNomad
Description#
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14.
Impact#
CAPEC-233: Privilege Escalation
Weaknesses#
- CWE-266 Incorrect Privilege Assignment
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.