ZDI-CAN-27898
MEDIUM 5.0
Overdue
Oct 29, 2025
JumpCloud
JumpCloud is a cloud-based directory and identity management platform used by organizations for user authentication and device management. This medium-severity vulnerability requires local access with low privileges and user interaction to exploit, but can cause significant availability impact and minor integrity compromise. Security teams should monitor for patches when the February 2026 deadline approaches and assess exposure among systems with local user access to JumpCloud components.
Advisory Details
Researcher
Discovered by:
Hillel Pinto
Reported
October 29, 2025
Deadline
February 26, 2026
49d overdue
CVSS Vector
AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:H