PT-2026-68277

Name of the Vulnerable Software and Affected Versions Jenkins Google Chat Notification Plugin versions prior to 166.ve6b de280f2e8 Description The plugin fails to set the appropriate context for credentials lookup. This allows attackers who possess Item/Configure permissions to access and capture...

CVE-2026-70442: Improper Authorization

Jenkins Google Chat Notification Plugin 166.ve6bde280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use...

Exposure of System-scoped credentials in google-chat-notification

google-chat-notification 166.ve6bde280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing the use of System-scoped credentials otherwise reserved for the global configuration. This allows attackers with Item/Configure permission to access and capture credentials...