Junglewise Threat Intelligence

CVE-2025-64132: Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools

CVE-2025-64132 · Severity: low · CVSS 3.1 · Published 2025-10-29

Vendors: Maven.

Executive brief

Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools

Affected products

  • Maven io.jenkins.plugins:mcp-server

Related threats