Jenkins OWASP ZAP Plugin: build operations run on the controller, giving Item/Configure users code execution

Impact

The plugin performs its build operations on the Jenkins controller rather than on the assigned agent, so anyone holding Item/Configure can get arbitrary code execution in the controller process. The controller is the piece of CI that holds the fleet's deployment credentials, registry tokens and kubeconfigs, so this converts job-configuration access into control over what gets built and pushed onto GPU nodes. It is a privilege boundary failure, not a parsing bug: the agent isolation operators rely on to keep job code off the controller simply is not applied here.

Who can reach it

Network, authenticated: a Jenkins user with Item/Configure permission on any job that can use this plugin. No access to the controller host is needed.

What to do

No fixed version is listed in the advisory - 1.0.7 and earlier are affected. Uninstall or disable the OWASP ZAP Plugin, or remove Item/Configure from users who should not have controller-level code execution. The change is a plugin removal plus a controller restart; build agents and running workloads are untouched.

References

Related entries

• Apache Airflow: executor_config deserialization imports arbitrary callables in scheduler and API serverCVE-2026-58076 · Apache Airflow serialization layer (exception branch reached via operator executor_config)High
• rclone (serve restic --private-repos): --private-repos is meant to confine each authenticated user to their ownCVE-2026-59733 · rclone (serve restic --private-repos)High
• Red Hat ACM: ManagedClusterAddOn annotation overrides governance-policy image, giving cluster-admin execCVE-2026-66793 · Red Hat Advanced Cluster Management governance-policy-addon-controllerHigh
• Apache Airflow: Callback deserialization in the scheduler timeout sweep imports Dag-author-chosen modulesCVE-2026-67587 · Apache Airflow Task SDK Callback deserialization (task instance next_kwargs)High
• Linux VXLAN driver (CAP_NET_ADMIN check on changelink across netns): A VXLAN tunnel's `changelink()` operates acrossCVE-2026-68432 · Linux VXLAN driver (CAP_NET_ADMIN check on changelink across netns)High
• Jenkins Multijob Plugin: Groovy features skip Script Security, giving job configurers controller RCECVE-2026-70431 · Jenkins Multijob Plugin (Groovy scripting outside Script Security)High