CVE-2026-84675 — Jenkins Project / Jenkins TICS Plugin

CVE-2026-84675

Jenkins Project / Jenkins TICS Plugin PUBLISHED

Description (CNA)

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins TICS Plugin	affected 0 through 2025.1.1

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-3987

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.