๐Ÿ” CVE Alert

CVE-2026-84671

HIGH 8.8
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file system through Stapler data binding, which can lead to remote code execution.

Vendor jenkins project
Product jenkins file parameter plugin
Published Sep 2, 2026
Last Updated Sep 2, 2026
Stay Ahead of the Next One

Get instant alerts for jenkins project jenkins file parameter plugin

Be the first to know when new high vulnerabilities affecting jenkins project jenkins file parameter plugin are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Jenkins Project / Jenkins File Parameter Plugin
0 โ‰ค 425.v3fa_801681b_5e

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
jenkins.io: https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4093