CVE-2023-1299: Hashicorp Nomad

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.

Affected products

• Hashicorp Nomad: version 1.5.0 only

Published 2023-03-14. Last modified 2026-06-17.