← Vulnerability feed

Vulnerability record · CVE-2026-48922 · published 27 May 2026

CVE-2026-48922: Jenkins credentials binding improper input validation vulnerability

Jenkins · Credentials Binding

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.

7.5 CVSS 3.1 High EPSS 0.58% · top 54.3% CWE-20 · Improper input validation
7.5CVSS 3.1 base score
0.58%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to provide credentials to a job to write files to arbitrary locations on the node filesystem, which can lead to remote code execution if Jenkins is configured to allow a low-privileged user to configure file or zip file credentials used for a job running on the built-in node.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3790 Vendor Advisory

Track CVE-2026-48922 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2026-42520Jenkins credentials binding path traversal vulnerabilityJenkins Credentials Binding Plugin 719.v80e905ef14eb_ and earlier does not sanitize file names for file and zip file credentials, allowing attackers …EPSS 0.60%7.3CVE-2025-53650Jenkins credentials binding insufficiently protected credentials vulnerabilityJenkins Credentials Binding Plugin 687.v619cb_15e923f and earlier does not properly mask (i.e., replace with asterisks) credentials present in except…EPSS 0.34%6.5CVE-2020-2181Jenkins credentials binding insufficiently protected credentials vulnerabilityJenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets in the build log when the build contains no …EPSS 1.1%6.5CVE-2019-1010241Jenkins credentials binding insufficiently protected credentials vulnerabilityJenkins Credentials Binding Plugin Jenkins 1.17 is affected by: CWE-257: Storing Passwords in a Recoverable Format. The impact is: Authenticated user…EPSS 1.5%4.3CVE-2022-20616Jenkins credentials binding missing authorization vulnerabilityJenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers …EPSS 0.85%4.3CVE-2020-2182Jenkins credentials binding insufficiently protected credentials vulnerabilityJenkins Credentials Binding Plugin 1.22 and earlier does not mask (i.e., replace with asterisks) secrets containing a `$` character in some circumsta…EPSS 0.88%4.3CVE-2018-1000057Jenkins credentials binding insufficiently protected credentials vulnerabilityJenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs. Jenkins however transforms pr…EPSS 0.66%9.5CVE-2026-93952Arista velocloud orchestrator improper input validation vulnerabilityVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality an…KEVEPSS 0.90%

Source: NIST National Vulnerability Database (record CVE-2026-48922), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.