CVE-2025-31867

Summary

CVE-2025-31867 is a critical authorization bypass vulnerability affecting the JoomSky JS Job Manager. This issue arises due to incorrectly configured access control security levels, enabling attackers to bypass user-controlled keys and gain unauthorized access. This vulnerability affects JoomSky JS Job Manager versions from n/a through 2.0.2, posing a significant risk to impacted systems. Successful exploitation could lead to various malicious activities, including data theft or system compromise. Users are strongly encouraged to update their JoomSky JS Job Manager installations to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.