Cross-Site Request Forgery Vulnerability in Jenkins Pipeline: Groovy Libraries Plugin
CVE-2026-84663

Currently unrated

Key Information:

Vendor

Jenkins
Status
Jenkins Pipeline: Groovy Libraries Plugin
Vendor
CVE Published:
2 September 2026

What is CVE-2026-84663?

A cross-site request forgery (CSRF) vulnerability exists in the Jenkins Pipeline: Groovy Libraries Plugin, allowing unauthorized users to perform actions that can delete shared library caches. This could lead to significant disruptions in the execution of builds and overall project functionality. Users are advised to review their plugin versions and apply necessary updates to mitigate any potential risks.

Affected Version(s)

Jenkins Pipeline: Groovy Libraries Plugin 0 <= 798.v5cc688825312

References

https://www.jenkins.io/security/advisory/2026-09-02/#SECU...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.