CVE-2026-92122

score

0.4

cvss

8.8

epss

0.6%

published

2026-09-16

kev added

—

first seen

2026-10-21

Jenkins Script Security Plugin <= 1415.v9a_f9b_3a_c253d contains a sandbox bypass caused by improper method checking in proxy creation when coercing values to interfaces, letting attackers with script execution permission run arbitrary code in Jenkins controller JVM, exploit requires permission to define and run sandboxed scripts.