5.9 Medium

CVE-2025-64135 Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property…

Description

Jenkins Eggplant Runner Plugin 0.0.1.301.v963cffe8ddb_8 and earlier sets the Java system property `jdk.http.auth.tunneling.disabledSchemes` to an empty value, disabling a protection mechanism of the Java runtime.

Affected products and versions

Product	Affected versions	Fixed in
Jenkins Eggplant Runner Plugin	Versions not published

Do you use Jenkins Eggplant Runner Plugin?

Track this CVE Watch Jenkins Eggplant Runner Plugin Check my SBOMs

www.cveye.io/en/cve/CVE-2025-64135

Timeline

Published October 29, 2025
Last modified November 4, 2025

References

Jenkins Security Advisory 2025-10-29 www.jenkins.io

Track this CVE