CVE-2025-58044

A security vulnerability was detected in JumpServer up to 4.10.19 in an unknown function of the Template Rendering component; manipulation of the IP/HOST argument leads to OS command injection. Remote exploitation is possible, the exploit has been publicly disclosed, and upgrading to 5.0.0 fixes the issue (patch fcf2904cdb884230e9676f50f37a44d09fa97040); the vendor confirms the fix will also be included in an upcoming v4 release.

JumpServer versions prior to v3.10.20-lts and v4.10.11-lts allow an authenticated, non-privileged user to retrieve connection tokens belonging to other users via the super-connection API endpoint. The endpoint returns tokens created by all users instead of restricting results to the requester's tokens. This is fixed in v3.10.20-lts and v4.10.11-lts.

A vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to bypass command filtering and execute arbitrary code. Note that the vendor disputes this, stating that command filtering is not intended to restrict authorized users.

Prior to 4.10.17-lts, JumpServer's Ansible-based automation rendering can evaluate attacker-controlled template expressions from users who have permission to create or execute affected automation tasks. Crafted content can invoke sensitive Ansible lookup behavior (file, pipe, env, password), disclosing files or environment values and potentially allowing limited command execution.

JumpServer is an open source bastion host and an operation and maintenance security audit system. From 4.8.0 until 4.10.17, an authenticated user with SFTP permission to an authorized asset can submit crafted traversal paths through the KoKo Web Terminal SFTP feature, causing AssetDir.GetRealPath() in pkg/srvconn/sftp_asset.go to resolve paths outside the intended SFTP root and permit read, list, write, rename, or delete operations under the configured backend account on that asset. This issue is fixed in version 4.10.17.

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, a user with the users.invite_user permission can submit an existing member to POST /api/v1/users/users/invite/, causing the organization invitation logic in apps/users/api/user.py to execute user.org_roles.set(org_roles) and replace the member's existing organization roles, which can escalate privileges or downgrade administrators. This issue is fixed in version 4.10.17.

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing Ansible to evaluate ansible_host inventory data or playbook variables during Applet Host deployment and execute arbitrary commands on the JumpServer control node. This issue is fixed in version 4.10.17.

JumpServer is an open source bastion host. Prior to v3.10.21-lts and v4.10.12-lts, a low-privileged authenticated user can invoke LDAP configuration tests and start LDAP synchronization by sending crafted messages to the /ws/ldap/ WebSocket endpoint, bypassing authorization checks.