CVE-2026-84662 PUBLISHED

Assigner: jenkins
Reserved: 01.09.2026 Published: 02.09.2026 Updated: 02.09.2026

Jenkins LDAP Plugin 807.809.vd3a_4e5e4ec98 and earlier allows connecting to a specified URL through Stapler data binding, allowing attackers to connect to an attacker-specified URL.

Product Status

Vendor Jenkins Project
Product Jenkins LDAP Plugin
Versions Default: unaffected
  • affected from 0 to 807.809.vd3a_4e5e4ec98 (incl.)

References