CVE-2025-24399

The Jenkins OpenId Connect Authentication Plugin versions 4.452.v2849b_d3945fa_ and earlier (except 4.438.440.v3f5f201de5dc ) are vulnerable to an authentication bypass. The plugin improperly treats usernames as case-insensitive , while the underlying OpenID Connect provider may be case-sensitive...