---
id: CVE-2026-120460
title: >-
  Jpom through 2.11.12 Cross-Workspace Authorization Bypass via Docker
  Controllers
summary: >-
  Jpom through 2.11.12 contains a cross-workspace authorization bypass
  vulnerability that allows authenticated users to manage other workspaces'
  Docker hosts by supplying foreign Docker asset ids. Attackers with Docker
  permission in any wo…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-639
vendor: dromara
product: Jpom
affected:
  - Jpom <= 2.11.12
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-11-02T17:10:29.516681Z'
published: '2026-11-02'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T17:31:18.564Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-120460'
references:
  - url: 'https://github.com/dromara/Jpom/issues/119'
  - url: >-
      https://github.com/dromara/Jpom/commit/ff09fe8095a792cea9c4b8babd93a333655d0a28
  - url: >-
      https://github.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/controller/docker/DockerContainerController.java#L48-L51
  - url: >-
      https://github.com/dromara/Jpom/blob/v2.11.12/modules/server/src/main/java/org/dromara/jpom/controller/docker/DockerImagesController.java#L48-L51
  - url: >-
      https://www.vulncheck.com/advisories/jpom-through-2.11.12-cross-workspace-authorization-bypass-via-docker-controllers
    label: >-
      VulnCheck Advisory: Jpom through 2.11.12 Cross-Workspace Authorization
      Bypass via Docker Controllers
tags:
  - cve.org
epss: 0.00373
epssPercentile: 0.31367
ingestedAt: '2026-11-05T19:30:42.730Z'
---

## Overview

Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to manage other workspaces' Docker hosts by supplying foreign Docker asset ids. Attackers with Docker permission in any workspace can control containers, images, volumes and networks, including creating privileged containers with host bind mounts.

## Affected

- `Jpom <= 2.11.12`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.