Description
Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jacamar CI | Jacamar CI | < 0.30.0 | 0.30.0 |
High · 7.5
CVE-2026-107589
EUVD-2026-95036GHSA-x75h-475x-5665
Authentication Bypass by Spoofing in Jacamar CI
Published Oct 8, 2026 · Updated Oct 8, 2026 · Assigned by GitLab