CVE-2024-40628

JumpServer is an open-source Privileged Access Management (PAM) tool that provides DevOps and IT teams with on-demand and secure access to SSH, RDP, Kubernetes, Database and RemoteApp endpoints through a web browser. An attacker can exploit the ansible playbook to read arbitrary files in the celery container, leading to sensitive information disclosure. The Celery container runs as root and has database access, allowing the attacker to steal all secrets for hosts, create a new JumpServer account with admin privileges, or manipulate the database in other ways. This issue has been addressed in release versions 3.10.12 and 4.0.0. It is recommended to upgrade the safe versions. There is no known workarounds for this vulnerability.

• CWE-22
• CWE-22

• https://github.com/jumpserver/jumpserver/security/advisories/GHSA-rpf7-g4xh-84v9Vendor Advisory
• https://www.sonarsource.com/blog/diving-into-jumpserver-attackers-gateway-to-internal-networks-2-2
• https://github.com/jumpserver/jumpserver/security/advisories/GHSA-rpf7-g4xh-84v9Vendor Advisory

Published

Jul 18, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4062A vulnerability was found in Hualai Xiaofang iSC5 3.2.2_112 …3.7
• CVE-2024-40620CVE-2024-40620 IMPACT A vulnerability exists in the affecte…7.5
• CVE-2024-40624TorrentPier is an open source BitTorrent Public/Private trac…9.8
• CVE-2024-40625GeoServer is an open source server that allows users to shar…4.9
• CVE-2024-40626Outline is an open source, collaborative document editor. A …5.4
• CVE-2024-40627Fastapi OPA is an opensource fastapi middleware which includ…5.8
• CVE-2024-40629JumpServer is an open-source Privileged Access Management (P…9.8
• CVE-2024-4063A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build…3.7
• CVE-2024-40630OpenImageIO is a toolset for reading, writing, and manipulat…4.3
• CVE-2024-40631Plate media is an open source, rich-text editor for React. E…8.1
• CVE-2024-40632Linkerd is an open source, ultralight, security-first servic…3.7
• CVE-2024-40633Sylius is an Open Source eCommerce Framework on Symfony. A s…5.3