ZDI-CAN-27899 MEDIUM 6.7 Overdue Nov 05, 2025

JumpCloud

JumpCloud is a cloud-based directory and identity management platform used for managing user access across IT environments. This medium-severity vulnerability requires local access with user interaction and low privilege level to exploit, but if successful could compromise confidentiality, integrity, and availability of affected systems. Security teams should monitor for privilege escalation attempts and unusual local user activity on systems running vulnerable JumpCloud components until patches are available by the March 2026 deadline.

Advisory Details
Researcher Discovered by: Hillel Pinto
Reported November 05, 2025
Deadline March 05, 2026 42d overdue
CVSS Vector AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy