CVE-2026-120461

The Jpom software (versions through 2.11.12 ) is susceptible to a cross-workspace authorization bypass via the POST /node/ssh_command/batch endpoint. The root cause is that the system resolves command templates and SSH nodes by ID without applying workspace filtering . This allows authenticated u...