Jet Admin vulnerabilities
We track 3 vulnerabilities in Jet Admin products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Jet Admin vulnerabilities
- 9.9 Critical severity
Jet Admin Cloud Platform: Exposure of Sensitive Information to an Unauthorized Actor
A prompt injection vulnerability in all versions of Jet Admin Cloud Platform allows a remote attacker with a free account to expose sensitive .env configuration files and exfiltrate critical credentials. Mitigated via sandbox component around October 29, 2026.
- 7.3 High severity
Jet Admin: Improper Neutralization of Input During Web Page Generation
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain.
- 8.6 High severity
Jet Admin: Missing Authorization
Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is