CVE-2026-48921

score

<0.1

cvss

7.5

epss

0.4%

published

2026-05-27

kev added

—

first seen

2026-10-21

Jenkins Pipeline: Groovy Libraries Plugin <= 797.v90ea_a_9b_e45a_0 contains a file system read vulnerability caused by lack of prohibition of symbolic links in shared libraries, letting attackers controlling library content read arbitrary files on the Jenkins controller filesystem, exploit requires control over library content.