CVE-2026-84664

The Jenkins GitLab Plugin (versions 1.9.16 and earlier ) is vulnerable to a Stapler data binding flaw that allows attackers to overwrite the global GitLab connection configuration . This enables an attacker to redirect connections to an attacker-specified URL while leveraging GitLab API tokens al...