References https://nvd.nist.gov/vuln/detail/CVE-2025-62712 https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6ghx-6vpv-3wg7 https://nsfocusglobal.com/jumpserver-connection-token-improper-authentication-vulnerability-cve-2025-62712-notice/ https://zeropath.com/blog/cve-2025-62712-jumpserver-token-exposure-brief https://access.redhat.com/security/cve/cve-2025-62712 https://app.opencve.io/cve/CVE-2025-62712 https://solidpoint.net/blog/cve-2025-62712-jumpserver-unauthorized-access-to-connection-tokens/ https://github.com/jumpserver/jumpserver/issues/16808 https://www.ctfiot.com/277146.html https://sec.ha.edu.cn/front/LoopholeDetail.aspx?id=83
Related VulnerabilitiesPoCCVE-2025-58044: JumpServer - Open Redirect via Referer Header飞致云 JumpServer 访问控制不当漏洞PoCCVE-2023-42442: JumpServer > 3.6.4 - Information DisclosurePoCCVE-2024-24763: JumpServer < 3.10.0 - Open RedirectPoCCVE-2023-42442: JumpServer 未授权访问PoCjumpserver-unauth-rce: Jumpserver Unauth RCE飞致云 JumpServer 需授权 任意文件读取漏洞JumpServer 需授权 文件写入漏洞JumpServer CVE-2024-29201 远程代码执行漏洞JumpServer 远程代码执行漏洞JumpServer CVE-2024-29202 远程代码执行漏洞