VULNERABILITY INTELLIGENCE

CVE-2025-3744

CVSS score7.6 HIGH

EPSS probability0.29%

CISA KEVNot currently listed

Published2025-05-13

Last modified2026-06-17

Description

Nomad Enterprise (“Nomad”) jobs using the policy override option are bypassing the mandatory sentinel policies. This vulnerability, identified as CVE-2025-3744, is fixed in Nomad Enterprise 1.10.1, 1.9.9, and 1.8.13.