PT-2026-128314

CVE-2026-117626

·

Published

2026-10-28

·

Updated

2026-10-28

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINS HOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the $JENKINS HOME, and attackers with Item/Workspace permission to obtain the names of jobs that have a workspace on the same agent.
Vendors
Affected products
Related identifiers
CVE-2026-117626
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com