Vulnerability Description
A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user name, and no-proxy host list of the configured HTTP proxy.
References
FAQ
What is CVE-2026-117625?
CVE-2026-117625 is a documented vulnerability. A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to obtain the server, port, user name, and no-proxy host list of the conf...
How severe is CVE-2026-117625?
CVSS scoring is not yet available for CVE-2026-117625. Check NVD for updates.
Is there a patch for CVE-2026-117625?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.