CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Jenkins.
CVE
CVE-2026-57280
Severity
HIGH
CVSS
8.8
EPSS
0.38%
Jenkins
Original NVD Description
Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy scripts, allowing attackers able to provide such scripts to invoke arbitrary constructors and bypass the sandbox protection.
Related CVEs
Other vulnerabilities affecting the same vendor(s)