Jenkins Credentials Binding Plugin up to 719.v80e905ef14eb_ privilege escalation

Summaryinfo

A vulnerability described as critical has been identified in Jenkins Credentials Binding Plugin up to 719.v80e905ef14eb_. This affects an unknown function. Executing a manipulation can lead to Remote Privilege Escalation. This vulnerability appears as CVE-2026-42520. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability has been found in Jenkins Credentials Binding Plugin up to 719.v80e905ef14eb_ and classified as critical. This vulnerability affects an unknown code block. The manipulation with an unknown input leads to a remote privilege escalation vulnerability. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Jenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.

The advisory is shared for download at jenkins.io. This vulnerability was named CVE-2026-42520 since 04/28/2026. The exploitation appears to be easy. The attack can be initiated remotely. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 05/01/2026).

The vulnerability scanner Nessus provides a plugin with the ID 310885 (Jenkins plugins Multiple Vulnerabilities (2026-04-29)), which helps to determine the existence of the flaw in a target environment.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at Tenable (310885), EUVD (EUVD-2026-26221) and CERT Bund (WID-SEC-2026-1320). Once again VulDB remains the best source for vulnerability data.

Affected

• Jenkins Jenkins

Productinfo

Type

• Continuous Integration Software

Vendor

• Jenkins

Name

• Credentials Binding Plugin

Version

• 719.v80e905ef14eb_

License

• open-source

Website

• Vendor: https://jenkins.io/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion