CVE-2025-67638

score

<0.1

cvss

4.3

epss

0.2%

published

2025-12-10

kev added

—

first seen

2026-10-21

Jenkins <= 2.540 and LTS <= 2.528.2 contain an information disclosure vulnerability caused by build authorization tokens not being masked on the job configuration form, letting attackers observe and capture tokens, exploit requires access to job configuration form.