CVE-2026-70439

The XML Job to Job DSL Plugin in Jenkins versions 0.1.13 and earlier is vulnerable due to the absence of permission checks, enabling unauthorized users to access and invoke the conversion functionality. This flaw could lead to unauthorized modifications or execution of jobs, potentially compromising the integrity of the CI/CD pipeline. Organizations using affected versions of Jenkins should prioritize remediation to mitigate the risk of exploitation.