ZDI-CAN-27899
MEDIUM 6.7
Overdue
Nov 05, 2025
JumpCloud
JumpCloud is a cloud-based directory and identity management platform used for managing user access across IT environments. This medium-severity vulnerability requires local access with user interaction and low privilege level to exploit, but if successful could compromise confidentiality, integrity, and availability of affected systems. Security teams should monitor for privilege escalation attempts and unusual local user activity on systems running vulnerable JumpCloud components until patches are available by the March 2026 deadline.
Advisory Details
Researcher
Discovered by:
Hillel Pinto
Reported
November 05, 2025
Deadline
March 05, 2026
42d overdue
CVSS Vector
AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H