CVE-2025-67639

Name of the Vulnerable Software and Affected Versions Jenkins versions 2.540 and earlier Jenkins LTS versions 2.528.2 and earlier

Description A cross-site request forgery (CSRF) issue exists in Jenkins that could allow an attacker to trick users into logging in to the attacker’s account. A CSRF attack leverages a user’s existing authentication to perform actions on their behalf without their knowledge.

Recommendations Update Jenkins to a version later than 2.540. Update Jenkins LTS to a version later than 2.528.2.