Dashboard / CVE-2026-57281

CVE-2026-57281

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2026-06-24 Modified: 2026-10-25 First seen: 2026-10-29 Status: pending_score

Description

Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not reject Groovy AST transformation annotations carrying an extensions member, allowing attackers able to run sandboxed Groovy scripts to execute code outside the sandbox if a suitable script is present on the classpath of the component that evaluates the script.

Weakness Classification (3)

Affected Software (1)

VendorProductVersion
jenkins script_security < 1402.v94c9ce464861

References & Advisories (15)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.92%
Raw Score 0.009230
Percentile 60.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00923
2026-10-28
0.00923

Intelligence Sources

nvd ref →

External Links