Skip to content
Sign in
8.8 High

CVE-2026-70431 Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with…

Description

Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin, allowing attackers with Item/Create or Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.

Affected products and versions

Product Affected versions Fixed in
Jenkins Multijob Plugin Versions not published

Other CVEs of Jenkins Multijob Plugin

The 3 CVEs of Jenkins Multijob Plugin →
CVE-2026-70432 A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows… 8.8 High CVE-2026-9674 A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 662.vd2e0001f6b_b_d and earlier allows… 4.3 Medium
Track this CVE