Jenkins Credentials Binding Plugin: unsanitized credential file names write files anywhere on the node

Impact

A user who can supply file or zip credentials to a job can set a file name containing path traversal, causing Jenkins to write attacker-chosen content to an arbitrary path on the node running the build. Where a low-privileged user may configure such credentials for a job on the built-in node, that becomes code execution as the Jenkins controller - which in a GPU fleet usually holds the keys to image registries, node provisioning and cluster credentials. A compromised build controller is a straight path to the whole cluster, and rebuilding it is far more expensive than patching it.

Who can reach it

Authenticated Jenkins user with permission to provide credentials to a job. Attack complexity is rated high, reflecting the configuration conditions that must hold (jobs running on the built-in node with low-privileged credential configuration).

What to do

Update the Credentials Binding Plugin past 719.v80e905ef14eb_ to the version named in the Jenkins advisory of 2026-04-29 (SECURITY-3672) and restart the controller. In the meantime, stop running jobs on the built-in node and restrict who may configure file and zip credentials. Plugin update plus controller restart only - no node maintenance.

References

Related entries

• OpenTelemetry JS Prometheus exporter: a malformed request URI crashes the whole Node.js processCVE-2026-44902 · OpenTelemetry JS Prometheus exporter (@opentelemetry/exporter-prometheus, also via sdk-node)High
• Suricata: unbounded NFS parser state lets crafted traffic exhaust sensor memoryCVE-2026-45766 · Suricata (NFS application-layer parser)High
• Airflow FTP provider: FTPS data channel sent in cleartext because PROT P was never issuedCVE-2026-49486 · Apache Airflow FTP provider (FTPSHook data channel)High
• Sigstore Timestamp Authority: unauthenticated requests mint unbounded Prometheus series until memory is exhaustedCVE-2026-49835 · Sigstore Timestamp Authority (wrapMetrics Prometheus label cardinality)High
• rclone (local backend, --links): When rclone copies from an untrusted remote with --links, it recreates symlinksCVE-2026-54572 · rclone (local backend, --links)High
• Jenkins Script Security Plugin: Groovy sandbox escape via AST annotation extensions memberCVE-2026-57281 · Jenkins Script Security Plugin (Groovy sandbox, AST transformation annotations)High