CVE-2026-84663: Vulnerability in Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin

This vulnerability in Jenkins Pipeline: Groovy Libraries Plugin (version 798.v5cc688825312 and earlier) is a CSRF issue that enables attackers to delete shared library caches. The vulnerability does not impact confidentiality but can affect integrity and availability by allowing unauthorized deletion of cached libraries. The CVSS 3.1 vector indicates it is remotely exploitable without privileges but requires user interaction.

An attacker exploiting this CSRF vulnerability can cause deletion of shared library caches, potentially disrupting Jenkins pipeline operations that rely on these cached libraries. There is no impact on confidentiality, but integrity and availability are affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, administrators should consider implementing CSRF protections at the Jenkins instance level or restrict access to trusted users to mitigate risk.