Skip to content
Sign in
4.3 Medium

CVE-2026-57300 A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read…

Description

A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access.

Affected products and versions

Product Affected versions Fixed in
Jenkins MCP Server Plugin Versions not published

Other CVEs of Jenkins MCP Server Plugin

The 2 CVEs of Jenkins MCP Server Plugin →
CVE-2025-64132 Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools,… 5.4 Medium
Track this CVE