CVE-2026-117615
CVE-2026-117615
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier follows symbolic links when copying the directory of an item being renamed, allowing attackers with Item/Create and Item/Configure permission to read arbitrary files on the Jenkins controller file system.
EPSS 0.2%
- Published
- Updated
Affected products and versions
jenkins
- Versions
- ≥ 2.588: Not affected (maven)
- ≥ 2.580.2, < 2.580.*: Not affected (maven)
No fix published