1. Home
  2. CVE Database
  3. CVE-2026-57284
MEDIUM · 4.3

CVE-2026-57284

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types rela...

Vulnerability Description

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
JenkinsPipeline\<= 4331.v9d06ed4658ff, _groovy

Related Weaknesses (CWE)

CWE-470

References

FAQ

What is CVE-2026-57284?

CVE-2026-57284 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types rela...

How severe is CVE-2026-57284?

CVE-2026-57284 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-57284?

Check the references section above for vendor advisories and patch information. Affected products include: Jenkins Pipeline\.