CVE-2025-27095: JumpServer has a Kubernetes Token Leak Vulnerability
JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.8.0 and 3.10.18, an attacker with a low-privileged account can access the Kubernetes session feature and manipulate the kubeconfig file to redirect API requests to an external server controlled by the attacker. This allows the attacker to intercept and capture the Kubernetes cluster token. This can potentially allow unauthorized access to the cluster and compromise its security. This vulnerability is fixed in 4.8.0 and 3.10.18.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27095?
CVE-2025-27095 is classified as a medium severity vulnerability.
How do I fix CVE-2025-27095?
To mitigate CVE-2025-27095, upgrade JumpServer to version 4.8.0 or 3.10.18 or later.
Who is affected by CVE-2025-27095?
CVE-2025-27095 affects users of JumpServer versions prior to 4.8.0 and 3.10.18.
What type of access is required to exploit CVE-2025-27095?
An attacker with a low-privileged account can exploit CVE-2025-27095.
What can an attacker do using CVE-2025-27095?
An attacker can manipulate the kubeconfig file to redirect API requests to an external server.