CVE-2026-33004 — Jenkins Project / Jenkins LoadNinja Plugin

CVE-2026-33004

Jenkins Project / Jenkins LoadNinja Plugin PUBLISHED

Description (CNA)

Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins LoadNinja Plugin	affected 0 through 2.1

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3642

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.