Description
（CVE-2025-4922）Nomad基于前缀ACL策略规则应用错误及覆盖漏洞
（CVE-2025-4922）Nomad基于前缀ACL策略规则应用错误及覆盖漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-4922
https://www.cve.org/CVERecord?id=CVE-2025-4922
https://github.com/advisories/GHSA-rx97-6c62-55mf
https://discuss.hashicorp.com/t/hcsec-2025-12-nomad-vulnerable-to-incorrect-acl-policy-lookup-attached-to-a-job/75396
https://securityonline.info/high-severity-flaw-in-hashicorp-nomad-cve-2025-4922-allows-privilege-escalation/
https://gbhackers.com/hashicorp-nomad-acl-lookup/
https://cybersecuritynews.com/hashicorp-nomad-vulnerability/
https://advisory.eventussecurity.com/advisory/nomad-acl-vulnerability-allows-privilege-escalation-via-prefix-policy-lookup/