Jenkins Ivy Report Plugin: XXE in Ivy report parsing gives an authenticated user file read on the controller

Impact

The plugin parses Ivy report files without disabling external entities, so a user who can influence a build's Ivy report can make the Jenkins controller resolve attacker-chosen entities. That yields file reads on the controller and outbound requests from it - and a CI controller in a GPU fleet is usually holding registry credentials, kubeconfigs, and cluster service-account tokens, which makes controller file read a credential-theft problem rather than an information leak. Exposure is entirely conditional on having this specific plugin installed; most Jenkins instances do not. NVD scores it 7.1 with low privileges required, so an ordinary job-configuring user is enough.

Who can reach it

Authenticated Jenkins user with enough permission to run or configure a job that produces an Ivy report the plugin then parses. Not reachable unauthenticated, and not reachable at all if the plugin is not installed.

What to do

First check whether the plugin is installed at all (Manage Jenkins - Plugins); if it is not, there is nothing to do. The Jenkins advisory covers version 1.2 and earlier - consult SECURITY-3899 for whether a fixed release exists, and do not assume one from this record. If no fix is listed, uninstall the plugin; either way the change requires a controller restart, which interrupts running builds but touches no GPU nodes.

References

Related entries

• Apache DolphinScheduler: non-admin users can read admin-managed kubeconfig credentialsCVE-2026-71895 · Apache DolphinScheduler (Kubernetes cluster configuration API)High
• Determined AI (master API, generic task kill/pause/unpause handlers): The generic task kill, pause and unpauseCVE-2026-75109 · Determined AI (master API, generic task kill/pause/unpause handlers)High
• Jenkins ThinBackup plugin: attacker redirects backups and pulls arbitrary controller files into themCVE-2026-84667 · Jenkins ThinBackup plugin (backup configuration writable via Stapler data binding)High
• Linux kernel nfsd: stale opcnt after compound release leaks adjacent slab memory through the RPC status netlink dumpCVE-2026-89691 · Linux kernel nfsd (nfsd4_release_compoundargs, RPC status netlink interface)High
• Linux kernel nfsd: dispatch error paths leave the status seqlock counter odd, exposing mutating compound stateCVE-2026-89705 · Linux kernel nfsd (nfsd_dispatch rq_status_counter seqlock protocol)High
• Harness: missing space-scoped access control lets any authenticated user read other spaces' infra provider configsCVE-2026-92750 · Harness (infrastructure provider read endpoint, /api/v1/infraproviders)High