CVE-2026-70439

The Jenkins XML Job to Job DSL Plugin version 0.1.13 and earlier is vulnerable to a missing permission check. Attackers lacking appropriate permissions can invoke the plugin's conversion functionality. Specifically, while users can only access jobs for which they have Item/Read permission, the pl...