CVE-2026-70442

Summary

Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.

Affected Software

VendorProductVersion RangeStatus
Jenkins ProjectJenkins Google Chat Notification Plugin0 <= 166.ve6b_de280f2e8affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References