News

JumpServer v4.10.10-lts Release Notes

#Release Notes
JumpServer v4.10.10-lts Release Notes

What’s new

  • Added database desensitization feature. (JumpServer EE)
    • Chen and KoKo support all relational databases.
    • Magnus supports MySQL only.

Improvements

  • Optimized Razor connection performance and reduced high memory usage (upgraded to FreeRDP3). (JumpServer EE)
  • Optimized the left tree structure in Adhoc to display only selected assets.
  • Added a matching tag name for the publisher (AppletHostOnly); when the publisher is invalid, it will no longer randomly select another one.
  • Theme settings on the Luna page can now be saved in personal preferences.
  • Added the gid parameter for user groups in the account push.

Bug fixes

  • Fixed an issue where ACL rules were displayed inaccurately in the global organization when selecting all assets. (JumpServer EE)
Keep Reading

Recommended Reading

JumpServer v4.10.19-lts Release Notes
News

JumpServer v4.10.19-lts Release Notes

JumpServer v4.10.19-lts released: KOTL component for visualized ops, Magnus port consolidation with auto protocol detection, clipboard access control for RDP/VNC, account policy for file transfers, SMTP CA support, Chen SQL parser upgrade, Elasticsearch 9 support, and 14 bug fixes.

Important Notice: JumpServer Vulnerability Advisory and Remediation (JS-2026.7.29)
Security

Important Notice: JumpServer Vulnerability Advisory and Remediation (JS-2026.7.29)

JumpServer security advisory JS-2026.7.29: Four vulnerabilities identified — CVE-2026-16723 (Fastjson in Chen), CVE-2026-54336 (KoKo SFTP path traversal), CVE-2026-44845 (Applet Host Jinja template injection RCE), CVE-2026-44846 (organization invitation permission override). Affects V3 < v3.10.22 LTS and V4 < v4.10.17 LTS. Upgrade to safe versions immediately.

Download Community Free Trial