What’s Vulnerable › Products
jumpserver vulnerabilities
28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your jumpserver version is affected
Latest jumpserver vulnerabilities
- CVE-2026-104126 — JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation (CVSS 6.0)
- CVE-2026-54336 — JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset (CVSS 5.4)
- CVE-2026-44846 — JumpServer: Privilege Overwrite via Organization Invite Logic Flaw (CVSS 6.2)
- CVE-2026-44845 — JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment (CVSS 6.7)
- CVE-2026-31864 — JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering (CVSS 6.8)
- CVE-2026-31798 — JumpServer Improper Certificate Validation in Custom SMS API Client (CVSS 5.0)
- CVE-2025-58044 — JumpServer has an Open Redirect Vulnerability (CVSS 6.1)
- CVE-2025-62795 — JumpServer Unauthorized LDAP Configuration Access via WebSocket (CVSS 7.1)
- CVE-2025-62712 — JumpServer Connection Token Leak Vulnerability (CVSS 8.1)
- CVE-2025-27095 — JumpServer has a Kubernetes Token Leak Vulnerability (CVSS 4.3)
- CVE-2024-40629 — Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver (CVSS 9.8)
- CVE-2024-40628 — Arbitrary File Read in Ansible Playbooks in Jumpserver (CVSS 9.1)
- CVE-2024-29202 — JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery (CVSS 9.9)
- CVE-2024-29201 — JumpServer's insecure Ansible playbook validation leads to RCE in Celery (CVSS 9.9)
- CVE-2024-29024 — JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality (CVSS 5.3)
- CVE-2024-29020 — JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked (CVSS 5.3)
- CVE-2024-24763 — JumpServer Open Redirect Vulnerability (CVSS 6.1)
- CVE-2023-48193 — (CVSS 9.8)
- CVE-2023-46138 — JumpServer default admin user email leak password reset (CVSS 5.3)
- CVE-2023-46123 — jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values (CVSS 5.3)
- CVE-2023-43651 — Remote code execution on the host system via MongoDB shell in jumpserver (CVSS 9.9)
- CVE-2023-42818 — SSH public key login without private key challenge if mfa is enabled in jumpserver (CVSS 9.8)
- CVE-2023-43652 — Non-MFA account takeover via using only SSH public key to login in jumpserver (CVSS 9.1)
- CVE-2023-43650 — Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver (CVSS 7.4)
- CVE-2023-42820 — Random seed leakage in Jumpserver (CVSS 8.2)