Jenkins Project Jenkins Pipeline: Build Step Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Pipeline: Build Step Plugin: 2 record(s), with affected versions and fixes.
CVE-2026-84661
Medium · 5.4
CWE-862 Sep 2, 2026
Missing Authorization in Jenkins Project Jenkins Pipeline: Build Step Plugin
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the `propagateAbort` parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.
CVE-2026-84660
Medium · 5.4
CWE-862 Sep 2, 2026
Missing Authorization in Jenkins Project Jenkins Pipeline: Build Step Plugin
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the `build` step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.