CVE-2026-57284

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline: Groovy Plugin versions prior to 4331.v9d06ed4658ff

Description Insufficient restriction on the types that can be instantiated through the Pipeline Snippet Generator allows attackers to instantiate types related to system or job configuration instead of only Pipeline steps.

Recommendations Update Jenkins Pipeline: Groovy Plugin to a version later than 4331.v9d06ed4658ff.