CVE-2026-54336

JumpServer (open source bastion host and O&M security audit system) is affected by a path traversal vulnerability in the KoKo Web Terminal SFTP feature (versions 4.8.0 through 4.10.17). An authenticated user with SFTP permission to an authorized asset can submit crafted traversal paths that cause...