Medium severity4.3NVD Advisory· Published Sep 2, 2026· Updated Sep 2, 2026
CVE-2026-84676
CVE-2026-84676
Description
Jenkins Parameterized Remote Trigger Plugin 3.2.2 and earlier stores tokens unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=3.2.2
Patches
Vulnerability mechanics
References
1News mentions
1- Jenkins Security Advisory 2026-09-02Jenkins Security Advisories · Sep 2, 2026