CVE-2026-112159
Received Received - Intake

Command Injection in JumpServer via Template Rendering

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulDB

Description
A security vulnerability has been detected in JumpServer up to 4.10.19. The affected element is an unknown function of the component Template Rendering. The manipulation of the argument IP/HOST leads to os command injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Upgrading to version 5.0.0 is sufficient to fix this issue. The identifier of the patch is fcf2904cdb884230e9676f50f37a44d09fa97040. The affected component should be upgraded. The vendor confirms: "This issue was identified quite some time ago, and we have already fixed it in the v5 branch. (...) The fix will also be included in an upcoming v4 release.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112159
EUVD
EUVD-2026-104455

Affected Vendors & Products

Showing 20 associated CPEs
Vendor Product Version / Range
n/a JumpServer 4.10.0
n/a JumpServer 4.10.1
n/a JumpServer 4.10.2
n/a JumpServer 4.10.3
n/a JumpServer 4.10.4
n/a JumpServer 4.10.5
n/a JumpServer 4.10.6
n/a JumpServer 4.10.7
n/a JumpServer 4.10.8
n/a JumpServer 4.10.9
n/a JumpServer 4.10.10
n/a JumpServer 4.10.11
n/a JumpServer 4.10.12
n/a JumpServer 4.10.13
n/a JumpServer 4.10.14
n/a JumpServer 4.10.15
n/a JumpServer 4.10.16
n/a JumpServer 4.10.17
n/a JumpServer 4.10.18
n/a JumpServer 4.10.19

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an OS command injection flaw in JumpServer versions up to 4.10.19. It occurs in the template rendering component where the IP/HOST argument is manipulated. An attacker can inject malicious commands through this field, leading to arbitrary code execution on the server. The issue arises due to insufficient input validation in asset address fields.

  • The vulnerability allows authenticated users with administrator privileges to execute OS commands by exploiting the IP/HOST field in the Assets section.
Detection Guidance

Check JumpServer versions below 5.0.0 for the vulnerability. Inspect logs for suspicious asset creation with AIX platform and malicious payloads in IP/HOST fields. Look for unauthorized command execution attempts or reverse shell connections.

Impact Analysis

An attacker could gain full system access, including the ability to execute arbitrary commands, install malware, or exfiltrate sensitive data. This could lead to complete compromise of the JumpServer instance and potentially the entire network it manages.

  • The exploit enables reverse shell access, giving attackers persistent control over the server.
Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating compliance requirements for GDPR and HIPAA. GDPR mandates protection of personal data, while HIPAA requires safeguarding protected health information. A successful exploit may result in non-compliance, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade JumpServer to version 5.0.0 or later immediately. Apply the patch identified by fcf2904cdb884230e9676f50f37a44d09fa97040. Review and remove any unauthorized assets or users created during the vulnerable period.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112159. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart