CVE-2026-57290 describes a CSRF vulnerability in the Jenkins Priority Sorter Plugin up to version 936.v2c01c6b_84449. Exploitation of this vulnerability enables an attacker to modify the global job priority settings within Jenkins, potentially affecting job scheduling priorities. The vulnerability is publicly known but lacks a CVSS score and official remediation guidance at this time.

Successful exploitation allows an attacker to overwrite global job priority configurations in Jenkins, which could disrupt job scheduling and prioritization. There is no information about known exploits in the wild or additional impacts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting access to Jenkins management interfaces and implementing CSRF protections where possible.