Jenkins Project Jenkins Pipeline: Multibranch Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Pipeline: Multibranch Plugin: 1 record(s), with affected versions and fixes.
CVE-2026-92130
Low · 3.1
CWE-863 Sep 16, 2026
Incorrect Authorization in Jenkins Project Jenkins Pipeline: Multibranch Plugin
Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.