Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-3744

No fix known EPSS <1%CVSS 7.6

Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.

Published 2025-05-13 · CVE record · OSV

Products: HashiCorp Nomad Enterprise