AIKIDO-2026-302418
jenkins-core is vulnerable to Deserialization of Untrusted Data
96
CVE Score
Critical
Deserialization of Untrusted Data
TL;DR
The Remoting deserialization path used for controller-to-agent communication skips the JEP-200 class filter on a fallback class-resolution path. An agent process, code running on an agent, or an attacker with Agent/Connect permission can therefore deserialize classes from the Jenkins core classpath that should have been blocked, and use that to run code on the controller. The fix also applies the class filter on the fallback path.
How do I fix this?
Upgrade the org.jenkins-ci.main:jenkins-core library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and connect agents to the Jenkins controller.
Package
Versions
0.0.1 - 2.568.1
Fixed in 2.568.22.569 - 2.575
Fixed in 2.576Background info
jenkins-core is vulnerable to Deserialization of Untrusted Data in versions 0.0.1 - 2.568.1 and 2.569 - 2.575.
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.