CVE-2026-48922

The Jenkins Credentials Binding Plugin versions 720.v3f6decef43ea_ and earlier are vulnerable to a path traversal issue due to insufficient sanitization of file names for file and zip file credentials. This allows an attacker who can provide credentials to a job to write files to arbitrary locati...