Unrated
Nomad Exposes Sensitive Workload Identity and Client Secret Token in Audit Logs
CVE-2025-1296
First seen on SecPulse
Original description The description as published by the source.
Nomad Community and Nomad Enterprise (“Nomad”) are vulnerable to unintentional exposure of the workload identity token and client secret token in audit logs. This vulnerability, identified as CVE-2025-1296, is fixed in Nomad Community Edition 1.9.7 and Nomad Enterprise 1.9.7, 1.8.11, and 1.7.19.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web discuss.hashicorp.com
- web github.com