CVE-2025-27095

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-27095

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27095.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-27095

Aliases

GHSA-5q9w-f4wh-f535

Published

2025-03-31T15:08:20.942Z

Modified

2026-04-10T05:23:44.062019Z

Severity

4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

JumpServer has a Kubernetes Token Leak Vulnerability

Details

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.10.18, an attacker with a low-privileged account can access the Kubernetes session feature and manipulate the kubeconfig file to redirect API requests to an external server controlled by the attacker. This allows the attacker to intercept and capture the Kubernetes cluster token. This can potentially allow unauthorized access to the cluster and compromise its security. This vulnerability is fixed in 4.8.0 and 3.10.18.

Database specific

{
    "cwe_ids": [
        "CWE-266"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/27xxx/CVE-2025-27095.json",
    "cna_assigner": "GitHub_M"
}

References

Affected packages

Git / github.com/jumpserver/jumpserver

Affected ranges

Type

GIT

Repo

https://github.com/jumpserver/jumpserver

Events

Introduced

Fixed

c2e6a57f27353e07087c787dd5801b4d2b345577

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.10.18"
        }
    ]
}

Type

GIT

Repo

https://github.com/jumpserver/jumpserver

Events

Introduced

6e7c11d6c0d113a883500a8cbd4bff04863d98cd

Fixed

6d66ba528874b7758c8745b6bbe0ebed641fe1d4

Database specific

{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.8.0"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27095.json"