Plango
Get Plango

For developers

Mac security

← AI agent vulnerabilities

CVE-2026-57300

Jenkins MCP Server

4.3
Severity
Medium
Published
June 24, 2026
Last modified
June 26, 2026

A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access.

CVSS vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness

References

CVE-2026-57300 on NVD

Listed in

MediumMCP serversMissing authorization

More Jenkins MCP Server CVEs

Oct 29
CVE-2025-641325.4

Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud…