Executive brief
Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors
Affected products
- Maven org.jenkins-ci.plugins:matrix-auth
Junglewise Threat Intelligence
CVE-2026-42521: Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors
CVE-2026-42521 · Severity: low · CVSS 3.1 · Published 2026-04-29
Technologies: org.jenkins-ci.plugins:matrix-auth (Maven). Vendors: Maven.