CVE-2026-70439 — Jenkins Project / Jenkins XML Job to Job DSL Plugin

CVE-2026-70439

Jenkins Project / Jenkins XML Job to Job DSL Plugin PUBLISHED

Description (CNA)

Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permission checks, allowing attackers lacking appropriate permissions to invoke the conversion functionality.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins XML Job to Job DSL Plugin	affected 0 through 0.1.13

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3779

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.