JumpServer v5.1.0 Release Notes: KoKo and Tinker Rebuilt, Windows PowerShell WinRM and Batch Recording Download

JumpServer v5.1.0 shipped on October 15, 2026. The release rebuilds two core components, KoKo and Tinker, and adds support for Windows PowerShell WinRM and the Dameng database Web CLI. Command filter rules can now be drafted with AI assistance and created from an assistant conversation, and the platform gains tab group management and batch download of session recordings. In the X-Pack edition, the Magnus component now connects to Dameng databases. Alongside these features, the project team delivered more than twenty improvements and bug fixes.

What’s New in JumpServer v5.1.0

• KoKo TUI terminal rebuilt. The plain text connection mode is restored, and the terminal now offers an asset tree, search and filtering, mouse operation, and multi-session management. This applies when you connect directly to the KoKo component with an SSH client.
• KoKo supports Windows PowerShell WinRM and Dameng database Web CLI. For WinRM, command audit, ACL, session recording, and the AI assistant are all available, and connections work from both Luna Web and the desktop client.
• Tinker rebuilt on the Windows authentication plugin. The component now provides an independent RDP desktop that replaces the earlier RemoteApp approach.
• DBX as the default database client in Luna. The Luna workspace connects to databases through the DBX database client, and the DBeaver remote application has been removed.
• AI-assisted command filter rules. Rules can be drafted with AI assistance and created through an assistant conversation, and the configuration experience for command filter rules and command groups has been refined.
• CIDR configuration for Zone. Assets are assigned to the correct zone automatically based on their address.
• Tab group management. Group information persists between sessions and restores with one click. Drag one tab onto another to create a group automatically.
• Credential hygiene reminders. JumpServer reminds users to create personal credentials and sends a daily activity summary, and the last-used time is now recorded for Access Keys, temporary passwords, connection tokens, and other credential types.
• Batch download of session recordings.
• Short-term expiration reminders for asset authorization.
• JDMC gains primary and standby management, system upgrade, and patch package management.
• Approval-free windows for asset login ACL (X-Pack). Once an approval is granted, the same user connecting to the same asset with the same account does not need re-approval until the window expires.
• OAuth2 user group sync (X-Pack). Includes user group attribute mapping and a configurable certificate verification method.
• Certificate verification for SAML2 remote metadata (X-Pack).
• Ticket audit filtering and export by creation time (X-Pack).

Improvements

• OpenBao now enables HTTPS by default.
• User MFA configuration follows the system setting by default, and methods that the system has not enabled are flagged. When the system enforces MFA, the MFA option in a user form is enabled and cannot be turned off.
• The SQL execution plan view in Chen Web has been redesigned, with a summary view and toolbar shortcuts.
• Search interaction in the Lina component has been simplified, and the value of a search condition can now be edited in place.
• LDAP supports mapping user groups through distinguishedName.
• Account templates now mark which fields follow the template, removing ambiguity during configuration.
• In-site messages support paginated viewing of all unread messages.
• The connect button and compact layout have been adapted for mobile screens.
• Keyboard and shortcut handling in the lower right corner of the page has been refined.
• Celery logs are displayed in a single window and switched with tabs.
• The default Ansible WinRM configuration has been optimized for HTTPS.
• Ticket exports convert the approval flow, approvers, approval status, and related resources into readable text (X-Pack).
• The connection method in an access control policy can now be selected per asset (X-Pack).

Bug Fixes

• Fixed an issue where the KoKo component could crash on some older CPUs.
• Fixed an issue where the node selection result was not saved when creating a job, and improved permission, command filter, and data masking checks when assets are selected through nodes.
• Fixed an issue where the Redis SSL verification setting did not take effect.
• Fixed LDAP connection timeout settings not taking effect, an LDAP HA user source being recorded incorrectly, and an exception raised when the LDAP user list was missing a sort field.
• Improved Jinja2 template content handling and username validation in account automation, so that unauthorized accounts cannot enter downstream automation flows.
• Fixed an inconsistency between the authorization scope and the detail list after accounts were excluded from an asset authorization.
• Fixed an issue where Web connections did not correctly support anonymous users.
• Fixed an issue where the LDAP scheduled sync switch was not displayed in the Community Edition.
• Fixed an issue where the AI popup was covered by the page in Web connections.
• Fixed an issue where the AI panel expanded automatically in the desktop client.

Upgrade and Availability

JumpServer v5.1.0 is available for both Community Edition and Enterprise Edition. Community Edition is free for up to 5,000 assets, and the X-Pack modules that carry the enterprise features in this release are licensed separately.

The v4 to v5 upgrade path needs no intermediate release. Database migrations roll forward continuously, so any current v4 deployment can move directly to v5.1.0. Upgrades use the standard installer flow:

cd /opt
wget https://github.com/jumpserver/installer/releases/download/v5.1.0/jumpserver-installer-v5.1.0.tar.gz
tar -zxvf jumpserver-installer-v5.1.0.tar.gz
cd jumpserver-installer-v5.1.0
./jmsctl.sh upgrade
./jmsctl.sh start

Learn More

• Read the JumpServer V5 introduction for the product direction behind this release line.
• See how the rebuilt Tinker component maps to day-to-day work in Connect Web Assets in JumpServer V5.
• Review the full feature list or start a free trial of the Enterprise Edition.