Secuno
ENNL
Book demo

CVE-2025-62712

Fit2cloud Jumpserver broken access control

9.6 CRITICALEPSS 0.50%
  1. Published30 Oct 2025

Description

JumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint (/api/v1/authentication/super-connection-token/). When accessed from a web browser, this endpoint returns connection tokens created by all users instead of restricting results to tokens owned by or authorized for the requester. An attacker who obtains these tokens can use them to initiate connections to managed assets on behalf of the original token owners, resulting in unauthorized access and privilege escalation across sensitive systems. This vulnerability is fixed in v3.10.20-lts and v4.10.11-lts.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Affected products

Fit2cloud Jumpserver≥ 4.0.0 < 4.10.11 · < 3.10.20

Remediation

Fixed in
Fit2cloud Jumpserver≥ 4.10.11

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-891089.1
SAP Manufacturing Integration and Intelligence does not sufficiently enforce…
CVE-2026-1096408.1
Frappe ERPNext before 16.22.0 contains a missing authorization vulnerability that…
CVE-2026-843158.3
Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, Nginx UI…
CVE-2026-571189.8
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59,…
CVE-2026-1092018.3
LogicalDOC Community Edition through 9.3 contains a missing authorization vulnerability…
CVE-2026-1091858.8
jshERP through 3.6 contains a missing authorization vulnerability in the UserController…

Frequently asked

Is CVE-2025-62712 being actively exploited?

CVE-2025-62712 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.50%.

How severe is CVE-2025-62712?

CVE-2025-62712 has a CVSS 3.1 base score of 9.6, rated critical. EPSS estimates a 0.50% probability of exploitation.

Which products are affected by CVE-2025-62712?

Affected products include Fit2cloud Jumpserver.

How do I fix CVE-2025-62712?

Upgrade affected software to a fixed version, for example Fit2cloud Jumpserver 4.10.11 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-62712 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.