CVE-2026-117614

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to...

EUVD-2026-112182

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

CVE-2026-117617

Jenkins versions 2.587 and earlier (LTS 2.580.1 and earlier ) are vulnerable to a race condition during artifact extraction. The software checks for symbolic links in the file path only before creating parent directories, but not immediately before the write operation. This oversight allows attac...

CVE-2026-117617

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

EUVD-2026-112179

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to...

CVE-2026-117614

Jenkins versions 2.587 and earlier , and LTS 2.580.1 and earlier , are vulnerable to an agent launch command approval bypass (CVE-2026-117614 ). The software converts launch commands from older agent configurations into launchers provided by the Command Agent Launcher Plugin without verifying adm...

CVE-2026-117614

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to...

PT-2026-128302

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.588 Jenkins LTS versions prior to 2.580.2 Description An issue exists where launch commands in older agent configurations are converted into launchers provided by the Command Agent Launcher Plugin without...

PT-2026-128305

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.588 Jenkins LTS versions prior to 2.580.2 Description An issue exists during the extraction of archives where the system checks for symbolic links in the path of an extracted file only before creating parent...

CVE-2026-117614: Undefined Security Weakness

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into launchers provided by the Command Agent Launcher Plugin without checking whether they have been approved by an administrator, allowing attackers with Agent/Configure permission to...

CVE-2026-117617: Undefined Security Weakness

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

Agent launch command approval bypass vulnerability

Since Jenkins 2.86, LTS 2.89.1 launching agents by running a command on the controller is implemented in the Command Agent Launcher Plugin rather than in Jenkins. For backward compatibility with older agent configurations, Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch...

Collection element type check bypass vulnerability

Jenkins uses XStream for serialization and deserialization of configuration and build data. The ability to provide XML documents to XStream is exposed to users who hold the respective /Configure permission, e.g., the item POST config.xml API is available with Item/Configure permission. XStream by...

BIT-RABBITMQ-2026-67218 RabbitMQ: Super-stream HTTP creation skips configure-permission check

RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, acceptcontent/2 at line 56 calls rabbitstreammanager:createsuperstream/... directly after isauthorized which only checks the management tag + vhost access via isauthorizedvhost. The stream-protocol...

Path Traversal

org.jenkins-ci.plugins, external-workspace-manager is vulnerable to path traversal. The vulnerability is due to improper validation of custom workspace paths in the exwsAllocate Pipeline step, which allows an attacker with Item/Configure permission to read arbitrary files on the Jenkins controlle...

Arbitrary Code Execution (ACE)

Jenkins OWASP ZAP Plugin is vulnerable to arbitrary code execution. The vulnerability is due to build operations being executed on the Jenkins controller instead of the assigned agent, which allows an attacker with Item/Configure permission to execute arbitrary code on the Jenkins controller...

CVE-2026-67218 RabbitMQ: Super-stream HTTP creation skips configure-permission check

RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, acceptcontent/2 at line 56 calls rabbitstreammanager:createsuperstream/... directly after isauthorized which only checks the management tag + vhost access via isauthorizedvhost. The stream-protocol...

CVE-2026-67218 RabbitMQ: Super-stream HTTP creation skips configure-permission check

RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, acceptcontent/2 at line 56 calls rabbitstreammanager:createsuperstream/... directly after isauthorized which only checks the management tag + vhost access via isauthorizedvhost. The stream-protocol...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Jenkins UI when displaying CWE values from Dependency-Check reports. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious content into the CWE values, whi...

CVE-2026-92136

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...