Skip to content
Sign in
7.4 High

CVE-2026-84675 OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build…

Description

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build.

Affected products and versions

Product Affected versions Fixed in
Jenkins TICS Plugin 2025.1 earliest → 2025.1.1 No fix stated

Other CVEs of Jenkins TICS Plugin

The 2 CVEs of Jenkins TICS Plugin →
CVE-2021-21613 Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting… Not rated
Track this CVE