EUVD-2026-53536

Jenkins Google Chat Notification Plugin 166.ve6bde280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use...

CVE-2026-70442

The Jenkins Google Chat Notification Plugin (version 166.ve6b_de280f2e8 and earlier) is vulnerable to an improper authorization flaw. The plugin fails to set the correct context during credentials lookup , which allows attackers possessing Item/Configure permissions to access and capture System-s...

CVE-2026-70442: Improper Authorization

Jenkins Google Chat Notification Plugin 166.ve6bde280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use...