CVE-2026-57281

score

0.1

cvss

7.5

epss

0.9%

published

2026-06-24

kev added

—

first seen

2026-10-21

Jenkins Script Security Plugin <= 1402.v94c9ce464861 contains a code execution vulnerability caused by improper rejection of Groovy AST transformation annotations with extensions member, letting attackers running sandboxed Groovy scripts execute code outside the sandbox, exploit requires presence of suitable script on classpath.