CVE-2025-64145

score

<0.1

cvss

4.3

epss

0.2%

published

2025-10-29

kev added

—

first seen

2026-10-21

Jenkins ByteGuard Build Actions Plugin 1.0 contains an information disclosure vulnerability caused by failure to mask API tokens on the job configuration form, letting attackers observe and capture sensitive tokens, exploit requires access to the job configuration form.