CVE-2025-4922

Description

Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

Affected packages (2)

• Go/github.com/hashicorp/nomadfrom 0, < 1.10.2
• Go/github.com/hashicorp/nomadfrom 0, < 1.10.2

CVSS scores

References (4)

• ADVISORYhttps://github.com/advisories/GHSA-rx97-6c62-55mf
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-4922
• PATCHhttps://github.com/hashicorp/nomad
• WEBhttps://discuss.hashicorp.com/t/hcsec-2025-12-nomad-vulnerable-to-incorrect-acl-policy-lookup-attached-to-a-job/75396