Executive brief
Jenkins Credentials Binding Plugin has a path traversal vulnerability
Affected products
- Maven org.jenkins-ci.plugins:credentials-binding
Junglewise Threat Intelligence
CVE-2026-42520: Jenkins Credentials Binding Plugin has a path traversal vulnerability
CVE-2026-42520 · Severity: low · CVSS 3.1 · Published 2026-04-29
Technologies: org.jenkins-ci.plugins:credentials-binding (Maven). Vendors: Maven.
Related threats
- Jenkins Credentials Binding Plugin path traversal in file credentials
- Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages
- Improper masking of some secrets in Jenkins Credentials Binding Plugin
- Secrets are not masked by Jenkins Credentials Binding Plugin in builds without build steps
- Jenkins Credentials Binding Plugin Stores Passwords in a Recoverable Format