CVE-2026-120461
Deferred Deferred - Pending Action

Jpom Authorization Bypass via Cross-Workspace SSH Command Execution

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: VulnCheck

Description
Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to run commands on other workspaces' SSH hosts using their stored credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-120461

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dromara Jpom 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-120461 is a cross-workspace authorization bypass in Jpom through version 2.11.12. It affects the POST /node/ssh_command/batch endpoint where command templates and SSH nodes are resolved by ID without proper workspace filtering. Authenticated users with SSH command execution permissions in one workspace can supply IDs from other workspaces to execute commands on those workspaces' SSH hosts using stored credentials.

Detection Guidance

Check Jpom logs for unauthorized cross-workspace SSH command executions. Monitor POST requests to /node/ssh_command/batch with foreign workspace IDs. Review command execution logs for unexpected commands or nodes outside the user's workspace.

Impact Analysis

This vulnerability allows an attacker with access to one workspace to execute commands on SSH hosts in other workspaces. This could lead to unauthorized access, data exfiltration, or system compromise across multiple isolated environments. The impact includes potential lateral movement within the system and unauthorized control of resources belonging to other workspaces.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data across workspaces, violating data isolation requirements in GDPR and HIPAA. It undermines access controls and could result in data breaches, non-compliance with data protection regulations, and potential legal consequences due to unauthorized data exposure.

Mitigation Strategies

Upgrade Jpom to the latest version with the fix. Implement strict workspace validation for SSH command execution. Review and restrict SSH node and template permissions across workspaces. Monitor for suspicious command executions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120461. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...