Jenkins Script Security Plugin: four Groovy sandbox escapes give code execution on the controller

Impact

Anyone allowed to define and run a sandboxed script - which includes anyone who can write a Jenkinsfile for a job they control - can break out of the Groovy sandbox and execute arbitrary code inside the Jenkins controller JVM. The controller holds the credentials that drive the whole fleet: registry push tokens, kubeconfigs for the GPU clusters, signing keys and cloud credentials, so a sandbox escape is effectively a fleet-wide credential compromise and a path to poisoning the images that land on GPU nodes. The vendor split this across four ids in one 2026-09-16 advisory, all against version 1415.v9a_f9b_3a_c253d and earlier with the same remediation: CVE-2026-92122 (methods reached through the proxy created when a value is coerced to an interface are not checked), CVE-2026-92123 (operations on a null receiver are not intercepted), CVE-2026-92124 (a cast is applied to a collection rather than to the elements read from it), and CVE-2026-92125 (the @GroovyASTTransformationClass annotation is not rejected, allowing an arbitrary AST transformation at compile time). An operator takes one action for all four.

Who can reach it

Any authenticated Jenkins user with permission to define and run sandboxed scripts or Pipelines, including ordinary job owners. Network-reachable, low privileges.

What to do

Upgrade the Script Security Plugin past 1415.v9a_f9b_3a_c253d to the release named in the 2026-09-16 Jenkins advisory; a plugin upgrade requires restarting the Jenkins controller, which drains or aborts in-flight builds. Until then, treat sandboxed-script permission as equivalent to controller admin and audit who holds it. Rotate credentials stored on the controller if you have reason to think the escape was used.

Also covers 3 CVEs

The vendor assigned a separate id to each affected code path. They share this advisory, this score and this fix, so they are one entry here.

References

Related entries

• Jenkins Robot Framework Plugin: archive path escapes the build directory, allowing arbitrary file writeCVE-2026-92137 · Jenkins Robot Framework Plugin (report archive directory)High
• KubeEdge (ConfigUpdateJob handler, updateFields): REMOTE CODE EXECUTION ON EDGE NODES via a normal Kubernetes APINCVD-2026-051-kubeedge-configupdatejob-handler · KubeEdge (ConfigUpdateJob handler, updateFields)High
• KubeEdge (NodeUpgradeJob handler, v1alpha2 API): REMOTE CODE EXECUTION ON EDGE NODES through the upgrade path. TheNCVD-2026-052-kubeedge-nodeupgradejob-handler · KubeEdge (NodeUpgradeJob handler, v1alpha2 API)High
• APC Network Management Card 4 (NMC4): An unauthenticated attacker can manipulate URL parameters to walk out of the webCVE-2024-58310 · APC Network Management Card 4 (NMC4)High
• Cisco Nexus Dashboard Fabric Controller (SSH host key validation): NDFC does not validate the SSH host keysCVE-2025-20163 · Cisco Nexus Dashboard Fabric Controller (SSH host key validation)High
• MinIO (S3 API, unsigned-trailer uploads): Signature validation on unsigned-trailer uploads is incomplete, so knowingCVE-2025-31489 · MinIO (S3 API, unsigned-trailer uploads)High