8.7
High
CVE-2026-120461 Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves…
Description
Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to run commands on other workspaces' SSH hosts using their stored credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jpom 2.11 | earliest → 2.11.12 | No fix stated |
Other CVEs of Jpom
The 5 CVEs of Jpom →
CVE-2026-120460
Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to…
8.7
High
CVE-2026-120201
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to…
9.3
Critical
CVE-2026-111605
Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated…
8.6
High
CVE-2026-91993
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list…
5.3
Medium