CVE-2026-117619

Jenkins versions 2.587 and earlier , and LTS 2.580.1 and earlier , are vulnerable to an issue where requests authenticated using HTTP Basic authentication (including those using an API token ) can obtain a "remember me" cookie. This allows an attacker who has acquired a user's API token to mainta...