CVE-2026-70432

The Jenkins Multijob Plugin versions up to 669.v9d96a_d9c71b_0 are vulnerable to a cross-site request forgery (CSRF) attack, enabling unauthorized users to execute arbitrary code within the Jenkins controller's JVM. This high-severity vulnerability poses a significant risk to Jenkins installations, particularly for those managing sensitive CI/CD pipelines. Organizations using this plugin should prioritize immediate updates to mitigate potential exploitation.