Jenkins Script Security Plugin: Groovy sandbox escape via AST annotation extensions member

Impact

A user who can only submit sandboxed Groovy - the normal privilege level for anyone editing a Pipeline - can execute code outside the sandbox, as the Jenkins controller process user. On a fleet that builds and ships GPU workloads, the controller is usually the single richest credential store on the network: registry push tokens, kubeconfigs for the training clusters, SSH keys to bare-metal nodes, and signing material. Exploitation is conditional: it needs a suitable AST-transform-carrying script already on the classpath of the component evaluating the Groovy, which is why the vendor rates attack complexity high. Where it does apply, the result is full compromise of the CI control plane rather than of one job.

Who can reach it

Any authenticated Jenkins user permitted to define or run a sandboxed Groovy script (Pipeline job configuration, shared library, or similar). No administrator rights needed; the classpath precondition above must also hold.

What to do

Upgrade Script Security Plugin beyond 1402.v94c9ce464861 as directed by the Jenkins advisory. Red Hat OpenShift Developer Tools and Services users (4.12, 4.15-4.18) should take the corresponding RHSA errata instead. A plugin upgrade needs a Jenkins controller restart, so drain or quiesce in-flight builds first; agents and GPU nodes are unaffected and do not need rebooting.

References

Related entries

• NVIDIA AIStore: Promote API reads any file reachable by the target processCVE-2026-65161 · NVIDIA AIStore (Promote API, absolute source path)High
• Airflow Backfill API: any Dag editor can read and cancel backfills belonging to other DagsCVE-2026-68968 · Apache Airflow Backfill API (authorization dependency id parsing)High
• GitLab CE/EE: improper input validation lets an unauthenticated user cause a denial of serviceCVE-2026-7427 · GitLab CE/EE (unauthenticated request path, improper input validation)High
• Splunk Enterprise Edge Processor sidecar: Prometheus metrics endpoint served without authenticationCVE-2026-76262 · Splunk Enterprise Edge Processor SPL2 Preview sidecar (Prometheus metrics endpoint)High
• Dell OpenManage Server Administrator (network-facing management service): OMSA is the in-band hardware management agentCVE-2026-81438 · Dell OpenManage Server Administrator (network-facing management service)High
• Linux kernel nfsd: uncapped POSIX ACL entry count drives an O(n^2) sort in the NFS serverCVE-2026-89695 · Linux kernel nfsd (NFSv4 POSIX ACL decoder, sort_pacl_range)High