HashiCorp Nomad Enterprise Policy Override Vulnerability Bypasses Mandatory Sentinel Policies

A vulnerability in HashiCorp Nomad Enterprise jobs allows the policy override option to bypass mandatory Sentinel policies. This issue is present in Nomad Enterprise versions prior to 1.10.0, 1.9.8, and 1.8.12. The vulnerability arises because hard mandatory Sentinel policies can be ignored when the policy-override flag is used during job submission, leading to the execution of jobs that violate these critical policy constraints.

Impact

Exploitation of this vulnerability allows for the violation of hard mandatory Sentinel policies, enabling the execution of jobs that should be restricted by these policies.

Remediation

Users should evaluate the risk associated with this vulnerability and consider upgrading to Nomad Enterprise versions 1.10.1, 1.9.9, or 1.8.13.