What is the CVSS score of CVE-2026-57300?

CVE-2026-57300 has a CVSS 3.1 base score of 4.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.2%.

Jenkins MCP Server Plugin CVE-2026-57300

EUVD-2026-38781 MEDIUM

Missing Authorization (CWE-862)

2026-06-24 jenkins

GHSA-mpff-xhg4-vr45

Authentication Bypass Jenkins Jenkins Mcp Server Plugin Jenkins Project

4.3

CVSS 3.1 · Vendor: jenkins

Severity by source

Vendor (jenkins) PRIMARY

4.3 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

vuln.today AI

4.3 MEDIUM

Network-accessible endpoint requires low privilege (Item/Read); only confidentiality of replay scripts is impacted; no integrity or availability effect.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (jenkins).

CVSS VectorVendor: jenkins

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 20:59 vuln.today

CVE Published

Jun 24, 2026 - 13:20 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A missing permission check in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier allows attackers with Item/Read permission to read the Pipeline replay scripts of jobs they can access.

AnalysisAI

Missing authorization in Jenkins MCP Server Plugin 0.177.v629fdb_2557fe and earlier exposes Pipeline replay scripts to users who hold only Item/Read permission. Authenticated Jenkins users can read replay script contents of any job they can see, potentially exposing sensitive pipeline logic, embedded credentials, or proprietary build configurations beyond what their permission level should allow. No active exploitation is confirmed (not in CISA KEV), no public exploit code has been identified, and the EPSS score of 0.17% (7th percentile) reflects minimal real-world exploitation interest at time of analysis.

Technical ContextAI

The affected product is identified by CPE cpe:2.3:a:jenkins_project:jenkins_mcp_server_plugin:*:*:*:*:*:*:*:* - a Jenkins plugin that exposes a Model Context Protocol (MCP) server interface for pipeline automation. CWE-862 (Missing Authorization) indicates that the plugin's API endpoint for retrieving Pipeline replay scripts performs authentication (requires a logged-in user) but does not enforce an appropriate authorization check to confirm that the caller holds permissions beyond Item/Read - such as Job/Build or Run/Replay - before returning script content. Pipeline replay scripts are the Groovy pipeline definitions used to re-run past builds and may contain embedded logic, variable assignments, or references to sensitive infrastructure that is not intended to be visible to read-only users.

RemediationAI

Upgrade Jenkins MCP Server Plugin to version 0.178.vffe5a_e770f3b_ or the backport release 0.172.174.v9f72da_90a_710, both confirmed by the Jenkins project security advisory at https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3759. If an immediate upgrade is not possible, a compensating control is to audit and restrict Item/Read permission grants across Jenkins jobs, limiting that permission to accounts that have an explicit business need - this reduces the pool of accounts that could exploit the missing check. A secondary compensating control is to ensure Pipeline replay scripts do not contain embedded credentials or sensitive secrets, migrating any such values to Jenkins Credentials Store (which enforces its own permission checks); this reduces the blast radius of unauthorized script reads without patching the authorization gap itself. Neither workaround replaces patching.