CVE-2024-12678

Name of the Vulnerable Software and Affected Versions Hashicorp Nomad versions prior to 1.9.4 Hashicorp Nomad versions prior to 1.8.8 Hashicorp Nomad versions prior to 1.7.16

Description The issue is related to privilege escalation within a namespace through unredacted workload identity tokens. This allows for potential exploitation, although specific details about the number of affected devices or real-world incidents are not provided.

Recommendations For versions prior to 1.9.4, update to Nomad Community Edition 1.9.4. For versions prior to 1.8.8, update to Nomad Enterprise 1.8.8. For versions prior to 1.7.16, update to Nomad Enterprise 1.7.16.