Vulnerability in Jenkins Project
CVE-2026-70430
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the types of objects that can be instantiated as part of the project naming strategy configuration, allowing attackers with Overall/Manage permission to instantiate arbit…
Affected products
- Jenkins Project — versions 2.576, 2.568.2
References
- jenkinsci-cert@googlegroups.com (vendor-advisory)