CVE-2026-92130

The Jenkins Pipeline Multibranch Plugin versions 841.vec5b_9e1806ec and earlier are vulnerable due to improper context settings for credential lookup during the resolveScm Pipeline step. This flaw enables attackers with Item/Configure permissions to access and potentially capture unauthorized credentials, posing a significant security risk. Organizations using affected Jenkins versions, particularly those with sensitive credential management, should prioritize addressing this vulnerability to safeguard their systems.