Medium severity4.3NVD Advisory· Published Sep 2, 2026· Updated Sep 22, 2026
CVE-2026-84659
CVE-2026-84659
Description
Jenkins Script Security Plugin 1412.v7737b_3405f86 and earlier does not enforce a permission check in the method that controls the "Force the use of the sandbox globally in the system" setting, allowing attackers to disable it through Stapler data binding.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1412.v7737b_3405f86
Patches
Vulnerability mechanics
References
1- www.jenkins.io/security/advisory/2026-09-02/nvdVendor Advisory
News mentions
2- Jenkins: 25 Vulnerabilities Disclosed Together, Including RCE and XSS FlawsVypr Intelligence · Sep 2, 2026
- Jenkins Security Advisory 2026-09-02Jenkins Security Advisories · Sep 2, 2026