Log Message Manipulation Vulnerability in Jenkins by CloudBees

CVE-2025-59476

What is CVE-2025-59476?

Jenkins versions up to 2.527 and LTS 2.516.2 are susceptible to a vulnerability where the application fails to adequately restrict or sanitize characters in user-defined log messages. This oversight permits attackers to inject line break characters, enabling the creation of forged log entries. As a result, administrators may be misled by the manipulated log outputs during their review processes, potentially leading to unauthorized access or other security issues.

References