THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-84651 (MEDIUM 6.3) — In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers wit

[NVD] CVE-2026-84651 (MEDIUM 6.3) — In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers wit

mednvdPublished 2026-09-02

CVE-2026-84651 CVSS: 6.3 MEDIUM Published: 2026-09-02T16:17:29.803

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the REST API and CLI endpoints for updating agent configuration do not prevent a submitted configuration from overwriting a different agent by specifying that agent's name in the submitted XML document, allowing attackers with Agent/Configure permission on one agent to take ov

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-84651