CVE-2026-70447 Jenkins Project CVE debrief

Who should care

Administrators and users of Jenkins AWS CodeBuild Plugin 0.59 and earlier, security teams monitoring for potential credential enumeration attacks, and operators managing Jenkins deployments should review and take action based on this vulnerability. Ensure that access to credentials IDs is restricted and monitor for suspicious activity related to credential enumeration attacks. This vulnerability may impact organizations using Jenkins AWS CodeBuild Plugin 0.59 and earlier, requiring review and potential updates to plugin versions and security configurations. Security teams should prioritize this vulnerability based on its CVSS score of 4.3 and MEDIUM severity, and consider the potential operational impact on affected systems. Vulnerability management and security teams should coordinate with operators and administrators to ensure proper mitigation and remediation of this vulnerability. Review compensating controls for exposed systems while remediation is scheduled and verified. Check relevant monitoring, detection, and logs for exposed assets that need extra review. Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up. Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed. Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. This vulnerability affects Jenkins AWS CodeBuild Plugin 0.59 and earlier, allowing attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. Security teams should review and update Jenkins AWS CodeBuild Plugin to version later than 0.59, restrict access to credentials IDs, and monitor for suspicious activity. Ensure that security configurations are updated to prevent potential credential enumeration attacks. This vulnerability may require updates to security policies and procedures to ensure proper mitigation and remediation. Security teams should consider the potential impact on affected systems and prioritize this vulnerability based on its CVSS score and severity. Review and update security configurations to prevent potential credential enumeration.

Technical summary

CVE-2026-70447 is a vulnerability in Jenkins AWS CodeBuild Plugin 0.59 and earlier. The plugin does not perform adequate permission checks, allowing attackers with Overall/Read permission to enumerate credentials IDs stored in Jenkins. This vulnerability allows attackers to potentially access sensitive credentials IDs, which could lead to unauthorized access or other security breaches. It is essential to review and update Jenkins AWS CodeBuild Plugin to version later than 0.59, restrict access to credentials IDs, and monitor for suspicious activity.

Defensive priority

Review and update Jenkins AWS CodeBuild Plugin to version later than 0.59, restrict access to credentials IDs, and monitor for suspicious activity.

Recommended defensive actions

• Review and update Jenkins AWS CodeBuild Plugin to version later than 0.59
• Restrict access to credentials IDs
• Monitor for suspicious activity

Evidence notes

Evidence is limited; verify affected versions and configurations of Jenkins AWS CodeBuild Plugin 0.59 and earlier. Check for Overall/Read permission and credentials ID exposure. Limited source detail; verify affected scope and configurations.

Official resources