CVE-2026-120460 — Jpom through 2.11.12: Cross-Workspace Authorization Bypass via Docker Controllers

Jpom through version 2.11.12 contains a cross-workspace authorization bypass vulnerability. Authenticated users can manage other workspaces' Docker hosts by supplying foreign Docker asset IDs.