A vulnerability, which was classified as critical, has been found in HashiCorp Nomad and Nomad Enterprise up to 1.10.1. Affected by this issue is some unknown functionality of the component Prefix-based ACL Policy Lookup. The manipulation leads to incorrect privilege assignment.
This vulnerability is handled as CVE-2025-4922. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
