| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/nomad | < 1.10.2 | 1.10.2 |
| nomad | ≥ 1.10.0, < 1.10.2≥ 1.4.0, < 1.10.2≥ 1.4.0, < 1.8.14≥ 1.9.0, < 1.9.10 | 1.10.21.8.141.9.10 |
Nomad Community and Nomad Enterprise (“Nomad”) prefix-based ACL policy lookup can lead to incorrect rule application and shadowing. This vulnerability, identified as CVE-2025-4922, is fixed in Nomad Community Edition 1.10.2 and Nomad Enterprise 1.10.2, 1.9.10, and 1.8.14.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free