---
id: CVE-2026-44845
title: >-
  JumpServer is an open source bastion host and an operation and maintenance
  security audit system
summary: >-
  JumpServer is an open source bastion host and an operation and maintenance
  security audit system. Prior to 4.10.17, an authenticated administrator with
  Applet Host management and deployment permissions can inject Jinja2
  expressions into …
severity: medium
cvss: 6.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H'
cwe:
  - CWE-1336
published: '2026-08-17'
updated: '2026-09-09'
sourceUpdated: '2026-09-09T21:11:46.833'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-44845'
references:
  - url: >-
      https://github.com/jumpserver/jumpserver/commit/cc57ba0de5f6015746fae11cfc62402b11618e59
    label: security-advisories@github.com
  - url: 'https://github.com/jumpserver/jumpserver/pull/16749'
    label: security-advisories@github.com
  - url: 'https://github.com/jumpserver/jumpserver/pull/16886'
    label: security-advisories@github.com
  - url: 'https://github.com/jumpserver/jumpserver/releases/tag/v4.10.17'
    label: security-advisories@github.com
  - url: >-
      https://github.com/jumpserver/jumpserver/security/advisories/GHSA-22h6-pcgh-9v7q
    label: security-advisories@github.com
  - url: >-
      https://github.com/jumpserver/jumpserver/security/advisories/GHSA-22h6-pcgh-9v7q
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00735
epssPercentile: 0.52415
ingestedAt: '2026-09-09T21:22:45.536Z'
---

## Overview

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing Ansible to evaluate ansible_host inventory data or playbook variables during Applet Host deployment and execute arbitrary commands on the JumpServer control node. This issue is fixed in version 4.10.17.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.