CVE-2026-107589: Jacamar Ci

High severity, CVSS 7.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names.

Affected products

• Jacamar Ci Jacamar Ci: before 0.30.0 (fixed in 0.30.0)

Published 2026-10-08. Last modified 2026-10-08.