CVE-2026-120461highCWE-639

CVE-2026-120461: fallo de gravedad alta en dromara Jpom

Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Publicada el

Seguir esta CVE+ Monitorear Jpom

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 0.4%
Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to run commands on other workspaces' SSH hosts using their stored credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
dromara · Jpom
CVEs relacionadas — dromara Jpom

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-120201CRITICALJpom 2.10.0 through 2.11.12 Authentication Bypass via JPOM-USER-TOKEN HeaderEPSS 0.6%CVE-2026-120460HIGHJpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker ControllersEPSS 0.4%CVE-2026-91993MEDIUMJpom through 2.11.12 Workspace Isolation Bypass via /build/branch-listEPSS 0.3%CVE-2026-111605HIGHJpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileControllerEPSS 0.3%