CVE-2026-84661
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds awaited by the `waitForBuild` step when the `propagateAbort` parameter is used to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.
| Vendor | jenkins project |
| Product | jenkins pipeline: build step plugin |
| Published | Sep 2, 2026 |
| Last Updated | Sep 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins pipeline: build step plugin
Be the first to know when new medium vulnerabilities affecting jenkins project jenkins pipeline: build step plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins Pipeline: Build Step Plugin
0 ≤ 599.v4b_67ea_11b_152