CVE-2025-0937

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-863

Affected software

VendorProductVersions
HashiCorpNomad>= 1.0.0, < 1.9.6
HashiCorpNomad Enterprise>= 1.0.0, < 1.9.6

References

Timeline

Published
Feb 12, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-09386.3The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn'tCVE-2025-09396.3The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on the plugin's AJAX aCVE-2025-09415.8MET ONE 3400+ instruments running software v1.0.41 can, under rare conditions, temporarily store credentials in plain text within the systemCVE-2025-09428.6The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows CVE-2025-09439.8A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknCVE-2025-09449.8A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue affects some unknown prCVE-2025-09459.8A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of thCVE-2025-09469.8A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknoCVE-2025-09478.8A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue isCVE-2025-09488.8A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part oCVE-2025-09498.8A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknowCVE-2025-09509.8A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown proces