CVE-2026-57288

The Jenkins Active Directory Plugin (version 2.41.1 and earlier ) is vulnerable to LDAP injection via the Windows native (ADSI) authentication path. The root cause is the failure to escape the user name before constructing the LDAP search filter. This allows unauthenticated attackers to inject LD...