Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2021-32575

HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.

Published: Jun 17, 2021
Updated: Nov 16, 2025
CVE: CVE-2021-32575
GHSA: GHSA-vf6q-9f2f-mwhv
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2:

Severity: Low
Score: 3.3
AV:A/AC:L/Au:N/C:N/I:P/A:N

CWEs:

CWE-1100

Affected Software
References

Software	From	Fixed in
hashicorp / nomad	-	1.0.4.x
github.com/hashicorp/nomad	1.0.0	1.0.5
github.com/hashicorp/nomad	-	0.12.12

https://discuss.hashicorp.com/t/hcsec-2021-14-nomad-bridge-networking-mode-allows-arp-spoofing-from-other-bridged-tasks-on-same-node/24296
https://www.hashicorp.com/blog/category/nomad

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo