CVE-2026-117617

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

CVE-2026-117617

Jenkins versions 2.587 and earlier (LTS 2.580.1 and earlier ) are vulnerable to a race condition during artifact extraction. The software checks for symbolic links in the file path only before creating parent directories, but not immediately before the write operation. This oversight allows attac...

CVE-2026-117617

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

CVE-2026-117617

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

EUVD-2026-112182

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

CVE-2026-117615

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with Item/Create and Item/Configure permission to read arbitrary files on the Jenkins controller file system...

CVE-2026-117615

The Jenkins automation server is vulnerable to an arbitrary file read vulnerability (CVE-2026-117615) in versions 2.587 and earlier , as well as LTS 2.580.1 and earlier . The root cause is that the application follows symbolic links when copying the directory of an item being renamed. This allows...

Jenkins security vulnerabilities

Security vulnerabilities exist in Jenkins versions 2.587 and earlier, as well as LTS 2.580.1 and earlier. These vulnerabilities arise from following symbolic links when copying and renaming project directories, potentially allowing attackers with Item/Create and Item/Configure permissions to read...

CVE-2026-117615: Undefined Security Weakness

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with Item/Create and Item/Configure permission to read arbitrary files on the Jenkins controller file system...

Collection element type check bypass vulnerability

Jenkins uses XStream for serialization and deserialization of configuration and build data. The ability to provide XML documents to XStream is exposed to users who hold the respective /Configure permission, e.g., the item POST config.xml API is available with Item/Configure permission. XStream by...

PT-2026-128305

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.588 Jenkins LTS versions prior to 2.580.2 Description An issue exists during the extraction of archives where the system checks for symbolic links in the path of an extracted file only before creating parent...

CVE-2026-117617: Undefined Security Weakness

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

Jenkins security vulnerabilities

Security vulnerabilities exist in Jenkins versions 2.587 and earlier, as well as LTS 2.580.1 and earlier. These vulnerabilities arise from the fact that symbolic links in the file paths are only checked prior to creating parent directories; they are not checked before writing files. This allows...

CVE-2026-84645

CVE-2026-84645 — Jenkins PersistenceRoot Deserialization RCE SECURITY-3972 PoC for the Jenkins deserialization vulnerability fixed on 2026-09-02 advisory. A low-privileged account holding Item/Configure on any single job can turn that into arbitrary code execution as the Jenkins OS user. | ---|--...

Path Traversal

org.jenkins-ci.plugins, external-workspace-manager is vulnerable to path traversal. The vulnerability is due to improper validation of custom workspace paths in the exwsAllocate Pipeline step, which allows an attacker with Item/Configure permission to read arbitrary files on the Jenkins controlle...

Arbitrary Code Execution (ACE)

Jenkins OWASP ZAP Plugin is vulnerable to arbitrary code execution. The vulnerability is due to build operations being executed on the Jenkins controller instead of the assigned agent, which allows an attacker with Item/Configure permission to execute arbitrary code on the Jenkins controller...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization due to improper context being set for credentials lookup in the resolveScm process. An attacker can gain unauthorized access to and capture credentials by leveraging Item/Configure permissions. Remediation Upgrade...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Jenkins UI when displaying CWE values from Dependency-Check reports. An attacker can execute arbitrary JavaScript code in the context of other users by injecting malicious content into the CWE values, whi...

CVE-2026-92133

Jenkins GitLab Plugin 1.2149.vcfc32c82bf7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure...

CVE-2026-92136

Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission...