Unrated severityNVD Advisory· Published Oct 28, 2026
CVE-2026-117621
CVE-2026-117621
Description
Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace browser for each file and directory, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes.
Affected products
1- Range: <=2.587, <=2.580.1
Patches
Vulnerability mechanics
References
1News mentions
1- Jenkins Security Advisory 2026-10-28Jenkins Security Advisories · Oct 28, 2026