CVE-2026-117622

Vulnerability Description

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers in control of agent processes.

References

https://www.jenkins.io/security/advisory/2026-10-28/#SECURITY-4249

FAQ

What is CVE-2026-117622?

CVE-2026-117622 is a documented vulnerability. Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler HttpResponse interface to the controller, resulting in a cross-site scripting (XSS) vulnera...

How severe is CVE-2026-117622?

CVSS scoring is not yet available for CVE-2026-117622. Check NVD for updates.

Is there a patch for CVE-2026-117622?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.