jumpserver vulnerabilities

CVEs per yearBy the year they were published

1. 202310
2. 20247
3. 20254
4. 20266

Newest CVEs

• CVE-2026-104126

  JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation

  jumpserver · jumpserver

  Medium6.0
• CVE-2026-44846

  JumpServer: Privilege Overwrite via Organization Invite Logic Flaw

  jumpserver · jumpserver

  Medium6.2
• CVE-2026-44845

  JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

  jumpserver · jumpserver

  Medium6.7
• CVE-2026-54336

  JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset

  jumpserver · jumpserver

  Medium5.4
• CVE-2026-31864

  JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering

  jumpserver · jumpserver

  Medium6.8
• CVE-2026-31798

  JumpServer Improper Certificate Validation in Custom SMS API Client

  jumpserver · jumpserver

  Medium5.0
• CVE-2025-58044

  JumpServer has an Open Redirect Vulnerability

  jumpserver · jumpserver

  Medium5.5
• CVE-2025-62795

  JumpServer Unauthorized LDAP Configuration Access via WebSocket

  jumpserver · jumpserver

  High7.1
• CVE-2025-62712

  JumpServer Connection Token Leak Vulnerability

  jumpserver · jumpserver

  Critical9.6
• CVE-2025-27095

  JumpServer has a Kubernetes Token Leak Vulnerability

  jumpserver · jumpserver

  Medium4.3