CVE-2026-84660 PUBLISHED

Assigner: jenkins
Reserved: 01.09.2026 Published: 02.09.2026 Updated: 02.09.2026

A missing permission check in Jenkins Pipeline: Build Step Plugin 599.v4b_67ea_11b_152 and earlier causes downstream builds triggered by the build step to be canceled even when the build's authentication lacks Item/Cancel permission on the downstream job.

Product Status

Vendor Jenkins Project
Product Jenkins Pipeline: Build Step Plugin
Versions Default: unaffected
  • affected from 0 to 599.v4b_67ea_11b_152 (incl.)

References