Jenkins Azure CLI Plugin: Item/Configure permission becomes arbitrary shell execution on the controller

Impact

Azure CLI Plugin 0.9 and earlier does not restrict which commands it runs, so any user who can configure a job turns Item/Configure into arbitrary shell commands executing as the Jenkins service account on the controller itself - not on an agent. On a build controller that holds cloud credentials, registry push tokens, signing keys and kubeconfigs for the fleet, that is a credential-theft and supply-chain foothold: whoever gets it can poison the container images and model artifacts that later run on GPU nodes. The relevant question for an operator is who holds Item/Configure, which in most installations is a much wider group than administrators.

Who can reach it

Authenticated Jenkins user with Item/Configure permission, over the network to the Jenkins web interface. No controller shell access or administrator rights needed beforehand.

What to do

The Jenkins security advisory of 2025-10-29 (SECURITY-3538) lists no fixed version for this plugin, so treat it as mitigate-only until one ships: uninstall or disable the Azure CLI Plugin, or restrict Item/Configure to trusted administrators on any controller that keeps it. Removing a plugin requires a controller restart to take full effect - a short CI outage, no impact on GPU nodes. Rotate any Azure or cloud credentials the plugin had access to if untrusted users held Item/Configure.

References

Related entries

• GitLab CE/EE: crafted sequences let an authenticated user drive unintended internal requests via the proxyCVE-2025-6454 · GitLab CE/EE (outbound request handling through proxy environments)High
• GitLab EE: a developer with group management permissions can escalate to broader system capabilitiesCVE-2025-7691 · GitLab EE (group management permissions)High
• N-able N-central: Improper input validationCVE-2025-8876 · N-able N-centralHigh
• Grafana: symlink escape in plugin archive extraction gives remote code execution as the Grafana processCVE-2026-15815 · Grafana OSS / Enterprise (plugin archive extraction)High
• Kubeflow Training Operator (RHOAI overlay, trainjobs aggregated into the edit ClusterRole): The RHOAI overlayCVE-2026-18951 · Kubeflow Training Operator (RHOAI overlay, trainjobs aggregated into the edit ClusterRole)High
• NetApp ONTAP WebAuthn multi-factor authentication (Relying Party ID): An attacker who already has valid credentialsCVE-2026-22049 · NetApp ONTAP WebAuthn multi-factor authentication (Relying Party ID)High