CVE-2026-84656

Jenkins versions 2.579 and earlier, as well as LTS 2.568.2 and earlier, are vulnerable due to a missing permission check that allows users with Item/Read permission on at least one job to access sensitive build parameter names and values from jobs they should not have access to. This vulnerability could lead to unauthorized information disclosure, potentially exposing sensitive data or configurations. Organizations using affected Jenkins versions should prioritize remediation to safeguard their CI/CD pipelines and sensitive information.