Threats tagged 'ghsa-c765-qv4h-jc48'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-117614Jenkins 2.587 and earlier, LTS 2.580.1 and earlier converts the launch commands in older agent configurations into High2026-10-28GCVE DatabaseCVE-2026-117614 Jenkins versions 2.587 and earlier, including LTS 2.580.1 and earlier, have a vulnerability where launch commands in older agent configurations are converted into launchers by the Command Agent Launcher Plugin without administrator approval. This flaw allows attackers with Agent/Configure permission to execute arbitrary code within the Jenkins controller JVM context. Report on CVE-2026-117614 Vulnerability #ghsa-c765-qv4h-jc48	GCVE Database	2026-10-28

Page 1 of 1