CVE-2026-57300 — Jenkins Project / Jenkins MCP Server Plugin

CVE-2026-57300

Jenkins Project / Jenkins MCP Server Plugin PUBLISHED

Description (CNA)

A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins MCP Server Plugin	unaffected 0.172.174.v9f72da_90a_710; unaffected 0.178.vffe5a_e770f3b_ before *

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3759

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.