5.4 Medium

CVE-2025-64132 Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools,…

Description

Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins MCP Server Plugin	Versions not published

The 2 CVEs of Jenkins MCP Server Plugin →

CVE-2026-57300 A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read… 4.3 Medium

Do you use Jenkins MCP Server Plugin?

Track this CVE Watch Jenkins MCP Server Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2025-64132

Timeline

Published October 29, 2025
Last modified November 4, 2025

References

Jenkins Security Advisory 2025-10-29 www.jenkins.io

Track this CVE

CVE-2025-64132 Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools,…

Description

Affected products and versions

Other CVEs of Jenkins MCP Server Plugin