CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

CVE-2026-84661

The Jenkins Pipeline: Build Step Plugin (version 599.v4b_67ea_11b_152 and earlier) is vulnerable to a missing permission check that allows unauthorized cancellation of downstream builds. When a build uses the waitForBuild step with the propagateAbort parameter set to true, the plugin fails to ver...

CVE-2026-84661

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b67ea11b152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream jo...

PT-2026-84784

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b 67ea 11b 152 and earlier causes downstream builds awaited by the waitForBuild step when the propagateAbort parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream...