CVE-2022-24685: Hashicorp Nomad

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

HashiCorp Nomad and Nomad Enterprise 1.0.17, 1.1.11, and 1.2.5 allow invalid HCL for the jobs parse endpoint, which may cause excessive CPU usage. Fixed in 1.0.18, 1.1.12, and 1.2.6.

Affected products

• Hashicorp Nomad: from 1.0.0, up to and including 1.0.17; from 1.1.0, before 1.1.12 (fixed in 1.1.12); from 1.2.0, before 1.2.6 (fixed in 1.2.6)

Published 2022-02-28. Last modified 2026-06-17.