Today we are releasing a maintenance version of Jamf Pro; highlights include:

Changes and Improvements

Jamf Pro 11.19.1 includes Tomcat 10.1.43.

Resolved Issues

Jamf Pro Server: Security Issues

Jamf provides the CVE-ID for security issues with high or critical severity when possible.

• [PI136944] [PI138128] Fixed: A known vulnerability in a third-party library (CVE-2025-48976).
• [PI138965] [PI138090] Fixed: A known vulnerability in a third-party library (CVE-2025-5878).

Jamf Pro Server

• [PI135178] Fixed: In a computer configuration profile with a Restrictions payload configured to allow integration with external intelligence services, users may be prevented from enabling ChatGPT on computers in scope. This is due to the profile containing the key "allowedExternalIntelligenceWorkspaceIDs", even if the corresponding setting is not selected.
• [PI139029] Fixed: Modifications to smart groups are unable to be saved when the group is a dependency of a blueprint and impact alert notifications are enabled.
• [PI139036] Fixed: Jamf Pro fails to save advanced searches that use certain criteria.
• [PI139037] Fixed: After editing and saving a configuration profile with a SCEP payload, Jamf Pro sets the Redistribute Profile setting to "Never" regardless of the chosen option, potentially causing issues in environments that depend on certificate distribution to authenticate with Wi-Fi or VPN.

For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.

Cloud Upgrade Schedule

Your Jamf Pro server, including any free sandbox environments, will be updated based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud instance.

To upgrade manually: Log in to Jamf Account, click View details on the Jamf Pro tile, and then click Upgrade on the appropriate instance. Note: This capability is not available for GovCloud environments and is disabled for all instances one day prior to when the scheduled standard upgrades begin.

Subscribe to product alerts to receive real-time updates.