VULNERABILITY INTELLIGENCE

CVE-2025-64132

CVSS score5.4 MEDIUM
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-10-29
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Description

Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in multiple MCP tools, allowing attackers to trigger builds and obtain information about job and cloud configuration they should not be able to access.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-862

Primary references