CVE-2026-82630

Name of the Vulnerable Software and Affected Versions PowerJob versions prior to 5.1.3

Description A server-side request forgery (SSRF) issue exists in the Transport Endpoint component. This occurs within the MuConnectionManager.getOrCreateConnection() function located in the powerjob-server/powerjob-server-starter/src/main/java/tech/powerjob/server/web/controller/TestController.java file. A remote attacker can manipulate this function to induce the server to make unauthorized requests.

Recommendations As a temporary workaround, restrict access to the MuConnectionManager.getOrCreateConnection() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.