CVE-2026-120461

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

CVE-2026-120460

Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspaces' Docker hosts by supplying foreign Docker asset ids. Attackers with Docker permission in any workspace can control containers, images, volumes and networks...

CVE-2026-120461

The Jpom software (versions through 2.11.12 ) is susceptible to a cross-workspace authorization bypass via the POST /node/ssh_command/batch endpoint. The root cause is that the system resolves command templates and SSH nodes by ID without applying workspace filtering . This allows authenticated u...

CVE-2026-120461 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

EUVD-2026-115221

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

CVE-2026-120461 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

CVE-2026-120461 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via /node/ssh_command/batch

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

EUVD-2026-115220

Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspaces' Docker hosts by supplying foreign Docker asset ids. Attackers with Docker permission in any workspace can control containers, images, volumes and networks...

CVE-2026-120460 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker Controllers

Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspaces' Docker hosts by supplying foreign Docker asset ids. Attackers with Docker permission in any workspace can control containers, images, volumes and networks...

CVE-2026-120460: dromara Jpom: Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to…

Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspaces' Docker hosts by supplying foreign Docker asset ids. Attackers with Docker permission in any workspace can control containers, images, volumes and networks...

PT-2026-135476

Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspaces' Docker hosts by supplying foreign Docker asset ids. Attackers with Docker permission in any workspace can control containers, images, volumes and networks...

CVE-2026-120461: dromara Jpom: Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves…

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/sshcommand/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs to...

PT-2026-135477

Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh command/batch that resolves command templates and SSH nodes by ID without workspace filtering. Authenticated users with SSH command execute permission in one workspace can supply foreign template and node IDs t...

CVE-2026-46558

CVE-2026-46558 Plane’s V2 asset subsystem trusted workspace slugs and asset UUIDs without enforcing the right membership checks, which let one authenticated user read, copy, delete, and overwrite assets in other workspaces. Intro I found this issue while reviewing Plane , the open-source project...

CVE-2026-111605 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-111605 Jpom through 2.11.12 Cross-Workspace Authorization Bypass via SshFileController

Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated workspace users to access SSH hosts belonging to other workspaces by supplying foreign SSH asset ids. Attackers with SSH file permissions in any workspace can call download, upload,...

CVE-2026-102986

Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/anchor/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a...

CVE-2026-102986

The open-source project management tool Plane (versions 1.3.1 and earlier) contains an authorization bypass in the EntityAssetEndpoint at the /api/public/assets/v2/anchor/{anchor}/ endpoint. While the endpoint requires authentication for write operations, it fails to verify workspace or project m...

CVE-2026-102986

Plane is an open-source project management tool. In 1.3.1 and earlier, EntityAssetEndpoint at the public project asset endpoint /api/public/assets/v2/anchor/anchor/ requires authentication for write operations but does not verify workspace or project membership. An authenticated user who knows a...