CVE-2025-62712

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-62712

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62712.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-62712

Aliases

GHSA-6ghx-6vpv-3wg7

Published

2025-10-30T16:08:32.669Z

Modified

2026-04-10T05:33:13.544014Z

Severity

9.6 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS Calculator

Summary

JumpServer Connection Token Leak Vulnerability

Details

JumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint (/api/v1/authentication/super-connection-token/). When accessed from a web browser, this endpoint returns connection tokens created by all users instead of restricting results to tokens owned by or authorized for the requester. An attacker who obtains these tokens can use them to initiate connections to managed assets on behalf of the original token owners, resulting in unauthorized access and privilege escalation across sensitive systems. This vulnerability is fixed in v3.10.20-lts and v4.10.11-lts.

Database specific

{
    "cwe_ids": [
        "CWE-862"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62712.json"
}

References

Affected packages

Git / github.com/jumpserver/jumpserver

Affected ranges

Type

GIT

Repo

https://github.com/jumpserver/jumpserver

Events

Introduced

6e7c11d6c0d113a883500a8cbd4bff04863d98cd

Fixed

91f66147113062a5842aa306c89a9c7349805b0a

Database specific

{
    "versions": [
        {
            "introduced": "4.0.0"
        },
        {
            "fixed": "4.10.11-lts"
        }
    ]
}

Type

GIT

Repo

https://github.com/jumpserver/jumpserver

Events

Introduced

Fixed

2f485b40bb2f7dcdd9d56615e56074f0d42487b8

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "3.10.20-lts"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62712.json"