CVE-2026-44845

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-44845
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44845.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-44845
Aliases
  • GHSA-22h6-pcgh-9v7q
Published
2026-08-17T21:03:08Z
Modified
2026-09-11T03:30:51Z
Severity
  • 6.7 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H CVSS Calculator
Summary
JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment
Details

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing Ansible to evaluate ansible_host inventory data or playbook variables during Applet Host deployment and execute arbitrary commands on the JumpServer control node. This issue is fixed in version 4.10.17.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-1336"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/44xxx/CVE-2026-44845.json"
}
References

Affected packages

Git / github.com/jumpserver/jumpserver

Affected ranges

Type
GIT
Repo
https://github.com/jumpserver/jumpserver
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
cc57ba0de5f6015746fae11cfc62402b11618e59
Fixed
c92f58554e2bd6651a91590a4ab2517cf77d6bf1
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.10.17"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

1.*
1.0.0
1.1.0
1.1.1
1.2.0
1.2.1
1.3.0
1.3.1
1.3.2
1.3.3
1.4.0
1.4.1
1.4.10
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.5.1
1.5.2
1.5.3
1.5.4
1.5.5
1.5.6
1.5.7
1.5.8
1.5.9
v1.*
v1.4.10
v1.4.4
v1.4.7
v2.*
v2.1.0
v2.10.0
v2.11.0
v2.12.0
v2.13.0
v2.15.0
v2.15.1
v2.17.0
v2.18.0
v2.18.1
v2.19.0
v2.2.0
v2.2.1
v2.20.0
v2.21.0
v2.22.0
v2.23.0
v2.24.0
v2.25.0
v2.26.0
v2.27.0
v2.3.0
v2.3.1
v2.4.0
v2.5.0
v2.6.0
v2.7.0
v2.8.0
v2.9.0
v4.*
v4.10.10
v4.10.13
v4.10.14
v4.10.15
v4.10.16
v4.10.2
v4.10.4
v4.10.8
v4.10.9
v4.6.0
v4.7.0
v4.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-44845.json"