# cve.now: Jumpserver

The newest entries naming Jumpserver as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-104126](https://cve.now/CVE-2026-104126.md): JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation (CVSS 6.0)
- [CVE-2026-44846](https://cve.now/CVE-2026-44846.md): JumpServer: Privilege Overwrite via Organization Invite Logic Flaw (CVSS 6.2)
- [CVE-2026-44845](https://cve.now/CVE-2026-44845.md): JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment (CVSS 6.7)
- [CVE-2026-54336](https://cve.now/CVE-2026-54336.md): JumpServer: KoKo Web Terminal SFTP Path Traversal on Authorized Asset (CVSS 5.4)
- [CVE-2026-31864](https://cve.now/CVE-2026-31864.md): JumpServer has a Server-Side Template Injection Leading to RCE via YAML Rendering (CVSS 6.8)
- [CVE-2026-31798](https://cve.now/CVE-2026-31798.md): JumpServer Improper Certificate Validation in Custom SMS API Client (CVSS 5.0)
- [CVE-2025-58044](https://cve.now/CVE-2025-58044.md): JumpServer has an Open Redirect Vulnerability (CVSS 5.5)
- [CVE-2025-62795](https://cve.now/CVE-2025-62795.md): JumpServer Unauthorized LDAP Configuration Access via WebSocket (CVSS 7.1)
- [CVE-2025-62712](https://cve.now/CVE-2025-62712.md): JumpServer Connection Token Leak Vulnerability (CVSS 9.6)
- [CVE-2025-27095](https://cve.now/CVE-2025-27095.md): JumpServer has a Kubernetes Token Leak Vulnerability (CVSS 4.3)
- [CVE-2024-40628](https://cve.now/CVE-2024-40628.md): Arbitrary File Read in Ansible Playbooks in Jumpserver (CVSS 10.0)
- [CVE-2024-40629](https://cve.now/CVE-2024-40629.md): Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver (CVSS 10.0)
- [CVE-2024-29202](https://cve.now/CVE-2024-29202.md): JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery (CVSS 10.0)
- [CVE-2024-29201](https://cve.now/CVE-2024-29201.md): JumpServer's insecure Ansible playbook validation leads to RCE in Celery (CVSS 10.0)
- [CVE-2024-29020](https://cve.now/CVE-2024-29020.md): JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook\_id is leaked (CVSS 4.6)
- [CVE-2024-29024](https://cve.now/CVE-2024-29024.md): JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality (CVSS 4.6)
- [CVE-2024-24763](https://cve.now/CVE-2024-24763.md): JumpServer Open Redirect Vulnerability (CVSS 4.3)
- [CVE-2023-46138](https://cve.now/CVE-2023-46138.md): JumpServer default admin user email leak password reset (CVSS 3.7)
- [CVE-2023-46123](https://cve.now/CVE-2023-46123.md): jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values (CVSS 5.3)
- [CVE-2023-42818](https://cve.now/CVE-2023-42818.md): SSH public key login without private key challenge if mfa is enabled in jumpserver (CVSS 5.4)
- [CVE-2023-43651](https://cve.now/CVE-2023-43651.md): Remote code execution on the host system via MongoDB shell in jumpserver (CVSS 8.6)
- [CVE-2023-43650](https://cve.now/CVE-2023-43650.md): Non-MFA account takeover via brute-force attack on weak password reset code in jumpserver (CVSS 8.2)
- [CVE-2023-43652](https://cve.now/CVE-2023-43652.md): Non-MFA account takeover via using only SSH public key to login in jumpserver (CVSS 8.2)
- [CVE-2023-42819](https://cve.now/CVE-2023-42819.md): Path traversal in Jumpserver (CVSS 8.9)
- [CVE-2023-42820](https://cve.now/CVE-2023-42820.md): Random seed leakage in Jumpserver (CVSS 7.0)
- [CVE-2023-42442](https://cve.now/CVE-2023-42442.md): JumpServer session replays download without authentication (CVSS 8.2)
- [CVE-2023-28110](https://cve.now/CVE-2023-28110.md): JumpServer Koko vulnerable to Command Injection for Kubernetes Connection (CVSS 5.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/jumpserver
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.