Skip to content
Sign in
4.3 Medium

CVE-2026-70442 Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for…

Description

Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.

Affected products and versions

Product Affected versions Fixed in
Jenkins Google Chat Notification Plugin Versions not published
Track this CVE