CVE-2026-70444

A missing permission check in the Jenkins Violation Comments to GitLab Plugin (version 2.62.0 and earlier) allows an attacker with Overall/Read permission to enumerate credentials IDs of credentials stored within Jenkins. These IDs can potentially be used in conjunction with other vulnerabilities...