Jenkins Script Security Plugin: Groovy sandbox escape via AST annotation extensions member

Impact

A user who can only submit sandboxed Groovy - the normal privilege level for anyone editing a Pipeline - can execute code outside the sandbox, as the Jenkins controller process user. On a fleet that builds and ships GPU workloads, the controller is usually the single richest credential store on the network: registry push tokens, kubeconfigs for the training clusters, SSH keys to bare-metal nodes, and signing material. Exploitation is conditional: it needs a suitable AST-transform-carrying script already on the classpath of the component evaluating the Groovy, which is why the vendor rates attack complexity high. Where it does apply, the result is full compromise of the CI control plane rather than of one job.

Who can reach it

Any authenticated Jenkins user permitted to define or run a sandboxed Groovy script (Pipeline job configuration, shared library, or similar). No administrator rights needed; the classpath precondition above must also hold.

What to do

Upgrade Script Security Plugin beyond 1402.v94c9ce464861 as directed by the Jenkins advisory. Red Hat OpenShift Developer Tools and Services users (4.12, 4.15-4.18) should take the corresponding RHSA errata instead. A plugin upgrade needs a Jenkins controller restart, so drain or quiesce in-flight builds first; agents and GPU nodes are unaffected and do not need rebooting.

References

Related entries

• GitLab CE/EE: improper input validation lets an unauthenticated user cause a denial of serviceCVE-2026-7427 · GitLab CE/EE (unauthenticated request path, improper input validation)High
• Splunk Enterprise Edge Processor sidecar: Prometheus metrics endpoint served without authenticationCVE-2026-76262 · Splunk Enterprise Edge Processor SPL2 Preview sidecar (Prometheus metrics endpoint)High
• ntpd (transmit timestamp prediction): A remote attacker who can predict transmit timestamps can crash ntpd or, worseCVE-2020-13817 · ntpd (transmit timestamp prediction)High
• Cisco Nexus 9000 in ACI mode (fabric infrastructure VLAN): A device plugged into a normal front-panel port can talk itsCVE-2021-1228 · Cisco Nexus 9000 in ACI mode (fabric infrastructure VLAN)High
• HTCondor (daemon-to-daemon channel, negotiator/startd/schedd): Secret material crosses the network in the clear whenCVE-2021-45104 · HTCondor (daemon-to-daemon channel, negotiator/startd/schedd)High
• Harbor registry: P2P preheat execution logs readable/updatable by any authenticated user via job ID enumerationCVE-2022-31671 · Harbor registryHigh