CVE-2026-107589
High
Description
Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names.
SeverityHigh
CVSS7.5
Exploit probability—
ProductJacamar CI
PublishedOct 8, 2026
First seenOct 8, 2026
Weakness typeCWE-290CWE-290
How to fix
Update
- Jacamar CI Jacamar CI0.30.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Jacamar CI Jacamar CI | v < 0.30.0 | 0.30.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.