CVE-2026-92127

Jenkins Script Security Plugin versions 1415.v9a_f9b_3a_c253d and earlier automatically approve classpath entries in an item configuration when a user with Overall/Administer permission copies the item or updates its configuration through the REST API or CLI . This allows attackers who can define...