CVE-2026-70447

The Jenkins AWS CodeBuild Plugin versions 0.59 and earlier are vulnerable due to inadequate permission checks, enabling users with Overall/Read permissions to enumerate stored credential IDs. This exposure could lead to unauthorized access to sensitive credentials, potentially compromising the security of integrated services. Organizations using affected versions of Jenkins should prioritize remediation to protect their credential management practices.