{"id":"CVE-2026-117616","kind":"vulnerability","aliases":["CVE-2026-117616"],"related":[],"title":"Jenkins: agent endpoint lets readers overwrite controller config files","description":"Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary config.xml file when that agent is saved, potentially resulting in arbitrary code execution.","summary":"Jenkins 2.587 and earlier, and LTS 2.580.1 and earlier, have an HTTP endpoint that loads agents by name without validating the name. An attacker with Overall/Read permission can load any config.xml on the controller as an agent configuration and overwrite an arbitrary config.xml when that agent is saved, which can lead to arbitrary code execution.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ci-cd","jenkins","runtime","self-hosted"],"not_affected_if":["no-untrusted-users","patched-version"],"how_to_check":"- Run `java -jar jenkins.war --version` or open Manage Jenkins to read the Jenkins version and compare it with `2.587` (weekly) and `2.580.1` (LTS)\n- Check whether any account besides administrators holds Overall/Read permission on the controller","fix":"- Upgrade Jenkins weekly to a release later than `2.587`\n- Upgrade Jenkins LTS to a release later than `2.580.1`\n- Restrict Overall/Read permission to trusted users until upgraded","status":"open","published_at":"2026-10-28T17:18:20+00:00","first_seen_at":"2026-10-28T17:34:09+00:00","triaged_at":"2026-10-28T17:34:56+00:00","updated_at":"2026-10-28T17:34:56+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-10-28T17:34:56Z","model":"claude-haiku-5-5","output":{"fix":"- Upgrade Jenkins weekly to a release later than `2.587`\n- Upgrade Jenkins LTS to a release later than `2.580.1`\n- Restrict Overall/Read permission to trusted users until upgraded","reach":"network","title":"Jenkins: agent endpoint lets readers overwrite controller config files","impact":"high","summary":"Jenkins 2.587 and earlier, and LTS 2.580.1 and earlier, have an HTTP endpoint that loads agents by name without validating the name. An attacker with Overall/Read permission can load any config.xml on the controller as an agent configuration and overwrite an arbitrary config.xml when that agent is saved, which can lead to arbitrary code execution.","category":"runtime","nicknames":[],"who_cares":["jenkins","self-hosted","ci-cd"],"confidence":0.5,"needs_auth":"yes","worst_case":"Attacker overwrites controller config files, potentially running arbitrary code","analyst_note":"Find the fixed Jenkins release numbers and the Jenkins security advisory for this CVE; the NVD entry alone does not give them.","how_to_check":"- Run `java -jar jenkins.war --version` or open Manage Jenkins to read the Jenkins version and compare it with `2.587` (weekly) and `2.580.1` (LTS)\n- Check whether any account besides administrators holds Overall/Read permission on the controller","needs_analyst":true,"not_affected_if":["patched-version","no-untrusted-users"],"who_is_affected":"Jenkins controllers running weekly 2.587 or earlier, or LTS 2.580.1 or earlier, where users other than administrators hold Overall/Read permission. Controllers where only trusted users can log in face lower risk. Sources do not specify the fixed release numbers.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000667,"input_tokens":3352,"output_tokens":663,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117616':12A,15A '-2026':11A,14A '2.580.1':30B,84C '2.587':25B,80C 'agent':2A,39B,60B,69B,93C,117C,128C 'allow':100C 'arbitrari':65B,76B,123C,134C 'attack':47B,101C 'cd':18B 'ci':17B 'ci-cd':16B 'code':77B,135C 'config':8A 'config.xml':54B,66B,108C,124C 'configur':61B,118C 'control':7A,57B,112C 'cve':10A,13A 'earlier':27B,32B,82C,86C 'endpoint':3A,36B,90C 'execut':78B,136C 'file':9A,109C,113C,125C 'host':23B 'http':35B,89C 'jenkin':1A,19B,24B,79C 'lead':74B 'let':4A 'load':38B,52B,92C,106C 'lts':29B,83C 'name':41B,45B,95C,99C 'overall/read':49B,103C 'overwrit':6A,63B,121C 'permiss':50B,104C 'potenti':131C 'provid':87C 'reader':5A 'result':132C 'runtim':20B 'save':71B,130C 'self':22B 'self-host':21B 'system':114C 'valid':43B,97C 'without':42B,96C","nicknames":[],"mitigations":[],"who_affected":"Jenkins controllers running weekly 2.587 or earlier, or LTS 2.580.1 or earlier, where users other than administrators hold Overall/Read permission. Controllers where only trusted users can log in face lower risk. Sources do not specify the fixed release numbers.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T17:18:20+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117616","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117616","severity":null,"published_at":"2026-10-28T17:18:20+00:00","modified_at":"2026-10-28T17:18:20+00:00","first_seen_at":"2026-10-28T17:34:09+00:00","fetched_at":"2026-10-28T17:34:09+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}