Jenkins Azure CLI Plugin CVE-2025-64140

Requires an authenticated Jenkins user holding Item/Configure permission, and the target controller must have the Azure CLI Plugin (version 0.9 or earlier) installed and used in a job configuration. The limiting factor is the Item/Configure privilege: the attacker must already be able to create or modify job configurations, so environments that tightly restrict job-configuration rights or do not use this plugin are not exposed. Exploitation is possible against default plugin behavior because the plugin performs no restriction on which commands it runs on the controller - no non-default setting is needed once the plugin is in use.

The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 8.8) indicates a network-reachable, low-complexity flaw requiring low privileges and no user interaction, yielding full confidentiality, integrity, and availability impact - consistent with arbitrary command execution on the Jenkins controller. The PR:L rating aligns with the description's requirement that the attacker hold Item/Configure permission, so this is an authenticated flaw, not an anonymous internet-facing one; the real-world population of attackers is therefore limited to users who already have job-configuration rights (a meaningful but non-trivial trust boundary in CI/CD environments). EPSS is low at 0.61% (48th percentile), there is no CISA KEV listing, and no public exploit was identified in the provided data, so despite the high CVSS the near-term mass-exploitation probability signaled by EPSS is modest. The signals are internally consistent - no contradiction between CVSS and the description - but the severity is driven by impact (controller code execution) rather than by ease of reaching the vulnerable function, which still demands an authenticated, privileged Jenkins account. This should be prioritized for patching in any Jenkins environment running the plugin because controller command execution enables full CI/CD compromise, but it is not an unauthenticated internet-wormable threat.

An attacker who holds Item/Configure permission on a Jenkins instance (for example a developer or a compromised low-trust account) configures or edits a job that uses the Azure CLI Plugin, supplying crafted input so the plugin runs attacker-chosen shell commands directly on the Jenkins controller. Because the plugin does not restrict which commands execute, this yields arbitrary command execution in the controller's context, enabling credential theft and full pipeline compromise. No public proof-of-concept was identified at the time of analysis.