Blog — Open-Source Privileged Access Management

Aug 03, 2026 · Security

Important Notice: JumpServer Vulnerability Advisory and Remediation (JS-2026.7.29)

JumpServer security advisory JS-2026.7.29: Four vulnerabilities identified — CVE-2026-16723 (Fastjson in Chen), CVE-2026-54336 (KoKo SFTP path traversal), CVE-2026-44845 (Applet Host Jinja template injection RCE), CVE-2026-44846 (organization invitation permission override). Affects V3 < v3.10.22 LTS and V4 < v4.10.17 LTS. Upgrade to safe versions immediately.

Jul 30, 2026 · News

JumpServer v4.10.18-lts Release Notes

JumpServer v4.10.18-lts release notes — includes improvements to Chen SQL parsing and memory optimization, along with 11 bug fixes addressing KoKo, Docker isolation, Redis session sharing, and Luna UI issues.

Jul 23, 2026 · News

Client-Side Recording Player and Transcoding Tool: JumpServer v4.10.17 LTS Release

JumpServer v4.10.17 LTS is released. This version integrates a recording player and transcoding tool into the client, adds UKey hardware authentication, custom favorite asset node trees, custom SSO authentication, and sensitive information export prevention. Core dependencies upgraded to Django 5.2, Python 3.14, and Vue 3.5. This article provides a detailed interpretation of all new features and improvements.

Jul 17, 2026 · Tutorials

How to Enable RDP Signing in JumpServer EE

Enable RDP signing in JumpServer EE using RDP_SIGN_ENABLED=1 to improve RDP file integrity, reduce spoofing risk, and align remote access hardening with Microsoft security guidance.

Jul 17, 2026 · News

JumpServer v4.10.17-lts Release Notes

What’s new Upgraded Django to 5.2 Upgraded Python to 3.14 Upgraded Vue to 3.5 Added support for custom Single Sign-On (SSO) authentication Added suppo

Jul 14, 2026 · Blog

What Is CyberArk? A Beginner's Guide to the PAM Leader and the JumpServer Open-Source Alternative

What is CyberArk? A complete guide to the privileged access management software leader — its core technology, product portfolio, and the $25B Palo Alto Networks acquisition. Compare CyberArk vs JumpServer, the leading open-source PAM alternative, covering features, pricing, and deployment.

Jul 14, 2026 · Blog

How to Evaluate PAM Solutions: The 8-Point Checklist Every Buyer Needs

Evaluating privileged access management (PAM) solutions? Use this practical 8-dimension checklist to compare deployment speed, protocol coverage, TCO, audit quality, API automation, community strength, and migration flexibility — before your first vendor call.

Jun 26, 2026 · Troubleshooting Guide

JumpServer Windows Assets Troubleshooting Guide

Comprehensive troubleshooting guide for JumpServer Windows assets. Covers Lion Web GUI, Razor MSTSC, RDP connection errors, network issues, and configuration fixes for privileged access management.

Jun 26, 2026 · Usage Guide

JumpServer API Authentication Methods Guide

Learn how to authenticate with JumpServer API using Access Key, Session, and Token-based methods. Complete guide with Python, Golang, and cURL examples for PAM automation.

JumpServer Blog