VDB
GO-2025-3570
GO-2025-3570
PUBLISHED
SSH public key login without private key challenge if mfa is enabled in jumpserver in github.com/jumpserver/koko in github.com/jumpserver/jumpserver
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | jumpserver/koko | 0, 0 |
| github.com | jumpserver/jumpserver | 0, 3.6.0+incompatible, 0 |
Timeline
- Jun 12, 2025 CVE Published
- Mar 3, 2026 CVE Updated
- May 1, 2026 Security Advisory