agentprime: jumpserverEvery new CVE for jumpserver.https://agentprime.io/CVE-2026-112159: JumpServer Template Rendering os command injectionhttps://agentprime.io/advisories/CVE-2026-112159/https://agentprime.io/advisories/CVE-2026-112159/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 16:15:17 GMTCVECVE-2026-104126: JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocationhttps://agentprime.io/advisories/CVE-2026-104126/https://agentprime.io/advisories/CVE-2026-104126/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 16:36:23 GMTCVECVE-2026-44846: JumpServer: Privilege Overwrite via Organization Invite Logic Flawhttps://agentprime.io/advisories/CVE-2026-44846/https://agentprime.io/advisories/CVE-2026-44846/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:04:18 GMTCVECVE-2026-44845: JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deploymenthttps://agentprime.io/advisories/CVE-2026-44845/https://agentprime.io/advisories/CVE-2026-44845/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:03:08 GMTCVECVE-2026-54336: JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Assethttps://agentprime.io/advisories/CVE-2026-54336/https://agentprime.io/advisories/CVE-2026-54336/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 21:01:48 GMTCVECVE-2026-31864: JumpServer has a Server-Side Template Injection Leading to RCE via YAML Renderinghttps://agentprime.io/advisories/CVE-2026-31864/https://agentprime.io/advisories/CVE-2026-31864/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 19:22:05 GMTCVECVE-2026-31798: JumpServer Improper Certificate Validation in Custom SMS API Clienthttps://agentprime.io/advisories/CVE-2026-31798/https://agentprime.io/advisories/CVE-2026-31798/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 13 Mar 2026 19:15:26 GMTCVECVE-2025-58044: JumpServer has an Open Redirect Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-58044/https://agentprime.io/advisories/CVE-2025-58044/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Dec 2025 20:17:44 GMTCVECVE-2025-62795: JumpServer Unauthorized LDAP Configuration Access via WebSockethttps://agentprime.io/advisories/CVE-2025-62795/https://agentprime.io/advisories/CVE-2025-62795/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 16:56:09 GMTCVECVE-2025-62712: JumpServer Connection Token Leak Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-62712/https://agentprime.io/advisories/CVE-2025-62712/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 16:08:32 GMTCVEcriticalCVE-2025-27095: JumpServer has a Kubernetes Token Leak Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-27095/https://agentprime.io/advisories/CVE-2025-27095/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 31 Mar 2025 15:08:20 GMTCVECVE-2024-40628: Arbitrary File Read in Ansible Playbooks in Jumpserverhttps://agentprime.io/advisories/CVE-2024-40628/https://agentprime.io/advisories/CVE-2024-40628/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jul 2024 17:05:21 GMTCVEcriticalCVE-2024-40629: Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserverhttps://agentprime.io/advisories/CVE-2024-40629/https://agentprime.io/advisories/CVE-2024-40629/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jul 2024 17:04:10 GMTCVEcriticalCVE-2024-29202: JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celeryhttps://agentprime.io/advisories/CVE-2024-29202/https://agentprime.io/advisories/CVE-2024-29202/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:57:43 GMTCVEcriticalCVE-2024-29201: JumpServer's insecure Ansible playbook validation leads to RCE in Celeryhttps://agentprime.io/advisories/CVE-2024-29201/https://agentprime.io/advisories/CVE-2024-29201/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:57:40 GMTCVEcriticalCVE-2024-29020: JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leakedhttps://agentprime.io/advisories/CVE-2024-29020/https://agentprime.io/advisories/CVE-2024-29020/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:46:00 GMTCVECVE-2024-29024: JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionalityhttps://agentprime.io/advisories/CVE-2024-29024/https://agentprime.io/advisories/CVE-2024-29024/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Mar 2024 14:45:56 GMTCVECVE-2024-24763: JumpServer Open Redirect Vulnerabilityhttps://agentprime.io/advisories/CVE-2024-24763/https://agentprime.io/advisories/CVE-2024-24763/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Feb 2024 17:35:08 GMTCVECVE-2023-46138: JumpServer default admin user email leak password resethttps://agentprime.io/advisories/CVE-2023-46138/https://agentprime.io/advisories/CVE-2023-46138/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Oct 2023 23:53:15 GMTCVECVE-2023-46123: jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP valueshttps://agentprime.io/advisories/CVE-2023-46123/https://agentprime.io/advisories/CVE-2023-46123/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Oct 2023 00:13:00 GMTCVECVE-2023-43650: Non-MFA account takeover via brute-force attack on weak password reset code in jumpserverhttps://agentprime.io/advisories/CVE-2023-43650/https://agentprime.io/advisories/CVE-2023-43650/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Sep 2023 18:33:46 GMTCVECVE-2023-43652: Non-MFA account takeover via using only SSH public key to login in jumpserverhttps://agentprime.io/advisories/CVE-2023-43652/https://agentprime.io/advisories/CVE-2023-43652/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 Sep 2023 18:31:41 GMTCVECVE-2023-42819: Path traversal in Jumpserverhttps://agentprime.io/advisories/CVE-2023-42819/https://agentprime.io/advisories/CVE-2023-42819/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Sep 2023 20:40:41 GMTCVECVE-2023-42820: Random seed leakage in Jumpserverhttps://agentprime.io/advisories/CVE-2023-42820/https://agentprime.io/advisories/CVE-2023-42820/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Sep 2023 20:35:22 GMTCVECVE-2023-42442: JumpServer session replays download without authenticationhttps://agentprime.io/advisories/CVE-2023-42442/https://agentprime.io/advisories/CVE-2023-42442/CVSS 8.2 (High). Critical: CVSS score 8.2 (7.0 or more) and EPSS 0.63 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 15 Sep 2023 20:29:12 GMTCVEcriticalCVE-2023-28110: JumpServer Koko vulnerable to Command Injection for Kubernetes Connectionhttps://agentprime.io/advisories/CVE-2023-28110/https://agentprime.io/advisories/CVE-2023-28110/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Mar 2023 16:18:49 GMTCVE