Back
CVE-2026-44845
JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment
Medium6.7EPSS 0.73%
- Published
- Updated
- Reserved
- Assigned by
- GitHub_M
Description
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing Ansible to evaluate ansible_host inventory data or playbook variables during Applet Host deployment and execute arbitrary commands on the JumpServer control node. This issue is fixed in version 4.10.17.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| GitHub_MCNA (assigner) | 3.1 | Medium6.7 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H |
| NVDNVD · Deferred | 3.1 | Medium6.7 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H |
- EPSS (exploitation in 30 days)
- 0.73% · top 45% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: poc · Automatable: no · Technical impact: partial
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.7.
Weakness
Affected products
- affected < 4.10.17
References (5)
- https://github.com/jumpserver/jumpserver/security/advisories/GHSA-22h6-pcgh-9v7q (opens in a new tab)x_refsource_CONFIRMexploit
- https://github.com/jumpserver/jumpserver/pull/16749 (opens in a new tab)x_refsource_MISC
- https://github.com/jumpserver/jumpserver/pull/16886 (opens in a new tab)x_refsource_MISC
- https://github.com/jumpserver/jumpserver/commit/cc57ba0de5f6015746fae11cfc62402b11618e59 (opens in a new tab)x_refsource_MISC
- https://github.com/jumpserver/jumpserver/releases/tag/v4.10.17 (opens in a new tab)x_refsource_MISC
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-44845)Record last updated .