CVE-2026-10276

Vulnerability

A server-side request forgery (SSRF) vulnerability exists in Jenkins-server-mcp version 0.1.0. The jobPath parameter in the get_build_status, get_build_log, and trigger_build functions within src/index.ts can be manipulated to prepend a /. This allows the constructed Axios request URL, such as /${args.jobPath}/${buildNumber}/api/json, to become protocol-relative, targeting internal or attacker-controlled hosts instead of the configured Jenkins URL [1].

Exploitation

An attacker can exploit this vulnerability by invoking Jenkins-server-mcp tools like get_build_status, get_build_log, or trigger_build. The attacker needs network egress to their chosen target, which can be an internal host or an external server. By providing a jobPath that starts with a /, the server will make a request to the attacker-controlled endpoint. The project was informed early, but no response has been received [1].

Impact

Successful exploitation of this SSRF vulnerability allows an attacker to cause the Jenkins-server-mcp to make arbitrary network requests on behalf of the server. This can lead to the disclosure of sensitive information from internal network resources or facilitate further attacks against internal systems. The scope of the compromise is limited to the network access and privileges of the Jenkins-server-mcp process itself [1].

Mitigation

As of the report date, a fixed version for Jenkins-server-mcp 0.1.0 is not available. The project was notified of the vulnerability but has not yet responded. No workarounds or patches have been disclosed in the available references [1].