CVE-2026-91993 — Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories fr…
Published: 2026-09-15 · CVSS: 5.3 · CVSS 4.0
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different workspaces to enumerate repository existence, determine repository type, and execute git ls-remote commands using other workspaces' stored credentials.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7