What is the CVSS score of CVE-2026-70448?

CVE-2026-70448 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 0.2%.

Which versions of Jenkins are affected by CVE-2026-70448?

Jenkins infrastructure running core versions through 2.575 and LTS 2.568.1 faces critical remote code execution vulnerabilities that could enable complete compromise of CI/CD controllers and all…

How to fix or mitigate CVE-2026-70448?

Within 24 hours: Identify all Jenkins deployments, assess network exposure, and immediately implement access controls restricting Agent/Connect permissions to essential personnel only. Within 7 days: Enable comprehensive audit logging, establish network segmentation isolating Jenkins controllers from lower-trust networks, and coordinate with the Jenkins security team for interim mitigation guidance. Within 30 days: Prepare and stage upgrades to patched versions when released by the Jenkins project, establish continuous monitoring for suspicious activity, and audit all installed plugins for compatibility with security updates.

Jenkins CVE-2026-70448

EUVD-2026-53542 HIGH

Improper Restriction of XML External Entity Reference (CWE-611)

2026-08-05

GHSA-64jg-65j7-rrm4

XXE Jenkins

7.1

CVSS 3.1 · Vendor

Severity by source

Vendor (CNA) PRIMARY

7.1 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

vuln.today AI

9.9 CRITICAL

Network-based Remoting channel, low complexity; PR:L for Agent/Connect permission; scope changes from agent to controller; full RCE impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Aug 05, 2026 - 16:29 vuln.today

CVE Published

Aug 05, 2026 - 14:02 oss-security

CRITICAL

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

AnalysisAI

Remote code execution, arbitrary file write, and privilege escalation vulnerabilities in Jenkins core (through 2.575 / LTS 2.568.1) and multiple plugins expose CI/CD infrastructure to full controller compromise. The most critical issue (CVE-2026-70426) allows agent processes and users with Agent/Connect permission to bypass the JEP-200 deserialization class filter via an unguarded fallback path in the Remoting library, enabling code execution on the Jenkins controller. Two independent arbitrary file write vectors (CVE-2026-70427 via malicious tar archives, CVE-2026-70428 via path traversal in file parameter names) can achieve equivalent controller-level code execution by writing Groovy scripts to JENKINS_HOME/init.groovy.d/ or deploying rogue plugins. No CISA KEV listing or public exploit has been identified at time of analysis, though the Jenkins security team coordinated a pre-announcement, suggesting no known active exploitation at disclosure.

Technical ContextAI

Jenkins uses the Remoting library (agent.jar / remoting.jar) for serialized Java object exchange between the controller and build agents over a persistent channel. JEP-200 introduced an allowlist-based class filter to prevent deserialization gadget attacks; CVE-2026-70426 identifies a fallback deserialization code path in Remoting 3384.v60d89463d9e0 and earlier that bypasses this filter for classes on the Jenkins core classpath (including bundled JDK classes), creating a classic deserialization gadget surface. CVE-2026-70427 exploits insufficient handling of symbolic links with effectively-empty names during tar/tar.gz extraction, a known pattern in archive traversal (CWE-22 / path traversal via archive extraction). CVE-2026-70428 exploits improper identification of traversal sequences in file parameter names, again CWE-22. CVE-2026-70429 is a Unicode normalization mismatch: canonical ID lowercasing uses Java's Locale-insensitive toLowerCase while comparisons use String#equalsIgnoreCase, which applies Unicode case-folding rules (e.g., dotless-i U+0131 equaling ASCII i), enabling username spoofing (CWE-178). CVE-2026-70430 allows unconstrained Java object instantiation via project naming strategy configuration (CWE-913 / improper control of dynamically managed code resources). CVE-2026-70431 in Multijob Plugin exposes Groovy execution outside Script Security Plugin's sandbox (CWE-693). Affected CPE: cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:* through 2.568.1 and cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:* through 2.575.

RemediationAI

The primary remediation is to upgrade Jenkins core to version 2.576 (weekly) or LTS 2.568.2, which contain fixes for all core CVEs. For plugin-specific issues, upgrade Multijob Plugin to 677.v7ffc23d6a_4c2, HCL AppScan Plugin to 1.8.4, SCM-Manager Plugin to 1.12.1, and Webhook Secret Credentials Provider Plugin to 32.v09c9b_522f0a_8. Plugins listed as having unresolved issues (AWS CodeBuild, CodeSonar, Google Chat Notification, Horreum, Ivy Report, Parameterized Remote Trigger, Qualys Container Scanning Connector, Sauce OnDemand, Summary Display, Violation Comments to GitLab, XML Job to Job DSL) have no available patch at time of advisory publication; the compensating control is to disable or uninstall these plugins until fixes are released. For CVE-2026-70426 specifically, restrict Agent/Connect permission to trusted, managed agent infrastructure only and isolate agent execution environments. For CVE-2026-70428, restrict Item/Configure and Item/Build permissions to trusted users as an interim measure. For CVE-2026-70429, if using an external security realm (LDAP, SAML) that permits non-ASCII usernames, audit for username collisions until the Jenkins core patch is applied. All advisories and patch details are published at https://www.jenkins.io/security/advisory/2026-08-05/.