NE
Product
Nomad Enterprise
20
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 11Medium 7Low 2
Watch
Add Nomad Enterprise to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-1296 | 6.5 | Mar 10 | Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs Affected: 1.0.0 before 1.9.7 |
| CVE-2024-12678 | 6.5 | Dec 20 | Nomad Allocations Vulnerable To Privilege Escalation Within A Namespace Using Unredacted Workload Identity Tokens Affected: 1.4.0 before 1.9.4 |
| CVE-2026-6959 | 6.0 | May 12 | Nomad vulnerable to arbitrary file read/write on client host through symlink attack Affected: 0.9.0 before 2.0.1 |
| CVE-2024-7625 | 5.8 | Aug 14 | Nomad Vulnerable to Allocation Directory Escape On Non-Existing File Paths Through Archive Unpacking Affected: 0.6.1 before 1.8.3 |
| CVE-2023-3300 | 5.3 | Jul 19 | Nomad Search API Leaks Information About CSI Plugins Affected: 0.11.0 through 1.4.1; 0.11.0 through 1.5.6 |
| CVE-2026-102260 New | 4.3 | Oct 29 | Nomad vulnerable to cross-namespace information disclosure in multiple endpoints Affected: 0.11.0 before 2.1.0 |
| CVE-2026-14896 | 4.2 | Jul 8 | Nomad vulnerable to cross-namespace host volume claim deletion Affected: 0.4.1 before 2.0.4 |
Showing 7