CVE-2026-111605
Deferred Deferred - Pending Action

Authorization Bypass in Jpom SSH File Controller

Publication date: 2026-10-16

Last updated on: 2026-10-16

Assigner: VulnCheck

Description
Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload, read_file_data.json, update_file_data.json, delete.json, rename.json and new_file_folder.json endpoints to read, modify and delete files on other workspaces' SSH hosts.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-16
Last Modified
2026-10-16
Generated
2026-10-16
AI Q&A
2026-10-16
EPSS Evaluated
N/A
NVD
CVE-2026-111605
EUVD
EUVD-2026-103027

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dromara Jpom 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-639 The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Jpom through 2.11.12 has an authorization bypass flaw in SshFileController. Authenticated workspace users can access SSH hosts of other workspaces by providing foreign SSH asset IDs. This allows attackers with SSH file permissions in any workspace to interact with endpoints like download, upload, read_file_data.json, update_file_data.json, delete.json, rename.json and new_file_folder.json to read, modify or delete files on other workspaces' SSH hosts.

Detection Guidance

To detect this vulnerability, review Jpom server logs for suspicious API calls to endpoints like /download, /upload, /read_file_data.json, /update_file_data.json, /delete.json, /rename.json, or /new_file_folder.json with foreign SSH asset IDs. Check for unauthorized file access or modifications across workspaces.

Impact Analysis

This vulnerability allows unauthorized users to access, modify, or delete files on SSH hosts belonging to other workspaces. If exploited, it could lead to data breaches, unauthorized file changes, or service disruption within affected environments.

Mitigation Strategies

Immediately upgrade Jpom to the latest version beyond 2.11.12. Restrict workspace user permissions to prevent unauthorized SSH host access. Monitor and audit API calls to sensitive endpoints. Consider isolating SSH hosts between workspaces until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111605. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart