diff --git a/.changelog/25310.txt b/.changelog/25310.txt
new file mode 100644
index 000000000..a3f040892
--- /dev/null
+++ b/.changelog/25310.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Add node_prefix read when setting up the task workload identity Consul policy
+```
diff --git a/command/asset/consul-wi-default-policy.hcl b/command/asset/consul-wi-default-policy.hcl
index e97c25817..09b4b1308 100644
--- a/command/asset/consul-wi-default-policy.hcl
+++ b/command/asset/consul-wi-default-policy.hcl
@@ -1,3 +1,7 @@
+node_prefix "" {
+  policy = "read"
+}
+
 service_prefix "" {
   policy = "read"
 }