---
id: "CVE-2026-117616"
kind: "vulnerability"
aliases: ["CVE-2026-117616"]
title: "Jenkins: agent endpoint lets readers overwrite controller config files"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "runtime"
products: []
ecosystems: []
tags: ["ci-cd", "jenkins", "runtime", "self-hosted"]
not_affected_if: ["no-untrusted-users", "patched-version"]
published_at: "2026-10-28T17:18:20+00:00"
first_seen_at: "2026-10-28T17:34:09+00:00"
updated_at: "2026-10-28T17:34:56+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-117616", "first_seen_at": "2026-10-28T17:34:09+00:00"}]
---

# Jenkins: agent endpoint lets readers overwrite controller config files

Jenkins 2.587 and earlier, and LTS 2.580.1 and earlier, have an HTTP endpoint that loads agents by name without validating the name. An attacker with Overall/Read permission can load any config.xml on the controller as an agent configuration and overwrite an arbitrary config.xml when that agent is saved, which can lead to arbitrary code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `java -jar jenkins.war --version` or open Manage Jenkins to read the Jenkins version and compare it with `2.587` (weekly) and `2.580.1` (LTS)
- Check whether any account besides administrators holds Overall/Read permission on the controller

## Fix

- Upgrade Jenkins weekly to a release later than `2.587`
- Upgrade Jenkins LTS to a release later than `2.580.1`
- Restrict Overall/Read permission to trusted users until upgraded

## Timeline

- 2026-10-28T17:34:09+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-117616

## From the sources

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validating the name, allowing attackers with Overall/Read permission to load any config.xml file on the controller file system as an agent configuration, and to overwrite an arbitrary config.xml file when that agent is saved, potentially resulting in arbitrary code execution.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_