High severity7.6NVD Advisory· Published May 13, 2025· Updated Jun 17, 2026

CVE-2025-3744

Description

Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hashicorp/Nomad Enterprisellm-fuzzy2 versions
up to 1.10.1, 1.9.9, and 1.8.13+ 1 more
- (no CPE)range: up to 1.10.1, 1.9.9, and 1.8.13
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

discuss.hashicorp.com/t/hcsec-2025-08-nomad-enterprise-vulnerable-to-violation-of-mandatory-sentinel-policies-in-job-submissions-via-policy-override/74935nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000