Executive brief
Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
Affected products
- Maven org.jenkins-ci.plugins:git-client
Junglewise Threat Intelligence
CVE-2025-67640: Jenkins Git client Plugin has an OS command injection vulnerability on agents in Git client Plugin
CVE-2025-67640 · Severity: low · CVSS 3.1 · Published 2025-12-10
Technologies: org.jenkins-ci.plugins:git-client (Maven). Vendors: Maven.
Related threats
- Jenkins Git client Plugin OS command injection in SSH wrapper script
- Jenkins Git client Plugin file system information disclosure vulnerability
- Jenkins Git client plugin 3.11.0 does not perform SSH host key verification
- Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
- Insecure temporary file usage in Jenkins Git Client Plugin