CVE-2021-41865: Hashicorp Nomad

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

HashiCorp Nomad and Nomad Enterprise 1.1.1 through 1.1.5 allowed authenticated users with job submission capabilities to cause denial of service by submitting incomplete job specifications with a Consul mesh gateway and host networking mode. Fixed in 1.1.6.

Affected products

• Hashicorp Nomad: from 1.1.1, before 1.1.6 (fixed in 1.1.6)

Published 2021-10-07. Last modified 2026-06-17.