CVE-2014-8120: Thermostat Project Thermostat

Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The agent in Thermostat before 1.0.6, when using unspecified configurations, allows local users to obtain the JMX management URLs of all local Java virtual machines and gain privileges via unknown vectors.

Affected products

• Thermostat Project Thermostat: up to and including 1.0.4

Published 2014-12-18. Last modified 2026-06-17.