CVE-2026-57284

score

<0.1

cvss

4.3

epss

0.3%

published

2026-06-24

kev added

—

first seen

2026-10-21

Jenkins Pipeline: Groovy Plugin <= 4331.v9d06ed4658ff contains a broken access control vulnerability caused by unrestricted type instantiation through the Pipeline Snippet Generator, letting attackers instantiate unauthorized job or system configuration types, exploit requires access to the Pipeline Snippet Generator.