CVE-2025-3744— Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override
Quick assessment
Affected
HashiCorp Nomad Enterprise
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HashiCorp Nomad Enterprise是美国HashiCorp公司的一个 Nomad 软件的专业版。 HashiCorp Nomad Enterprise存在安全漏洞，该漏洞源于策略覆盖选项绕过强制sentinel策略。
Possible ATT&CK Techniques 2 AI
T1528 · Steal Application Access Token T1052 · Exfiltration Over Physical Medium
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-3744
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nomad Vulnerable To Violation Of Mandatory Sentinel Policies in Nomad Job Submissions via Policy Override
Source: CVE Program / CVE List V5
Vulnerability Description
Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Vulnerability Title
HashiCorp Nomad Enterprise 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HashiCorp Nomad Enterprise是美国HashiCorp公司的一个 Nomad 软件的专业版。 HashiCorp Nomad Enterprise存在安全漏洞，该漏洞源于策略覆盖选项绕过强制sentinel策略。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| HashiCorp | Nomad Enterprise | 0 ~ 1.10.1 | - |
|
II. Public POCs for CVE-2025-3744
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-3744
请登录查看更多情报信息。
Other References for CVE-2025-3744 (1)
IV. Related Vulnerabilities
Same vendor: HashiCorp
-
CVE-2026-5006
Vault Vulnerable to Privilege Escalation via Slash Injection -
CVE-2026-14978
Unicode normalization mismatch in go-slug ignore pattern mat -
CVE-2026-19589
Packer vulnerable to arbitrary file write via crafted plugin -
CVE-2026-8715
Vault Secrets Operator vulnerable to arbitrary file read and -
CVE-2026-14886
Vault Enterprise vulnerable to cross-namespace entity deleti
Same weakness: CWE-266
-
CVE-2026-78477
Jawn <= 1.4.2 - Unauthenticated Privilege Escalation -
CVE-2026-78267
WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalat -
CVE-2026-32561
WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation -
CVE-2026-21756
HCL Hive is affected by a broken access control vulnerabilit -
CVE-2026-66648
WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnera
V. Comments for CVE-2025-3744
No comments yet