CVE-2026-57295

score

<0.1

cvss

5.4

epss

0.2%

published

2026-06-24

kev added

—

first seen

2026-10-21

Jenkins EC2 Fleet Plugin <= 4.2.3.539.v8fedff2a_81c3 contains a cross-site request forgery caused by lack of request validation, letting attackers connect to attacker-specified URLs and capture AWS credentials, exploit requires attacker to induce victim interaction.