CVE-2026-92125

The Jenkins Script Security Plugin, up to and including version 1415.v9a_f9b_3a_c253d, fails to reject the @GroovyASTTransformationClass annotation in sandboxed Groovy code, which is CWE-94 code injection by design of the sandbox filter. An attacker who already has permission to define and run sandboxed scripts — typically any user able to create or modify Pipeline jobs — can supply an arbitrary Groovy AST (Abstract Syntax Tree) transformation that the compiler executes at compile time, outside the sandbox's method-level interception. This bypasses the sandbox entirely and yields arbitrary code execution in the Jenkins controller JVM, giving the attacker control of the CI/CD server, its stored credentials, secrets, and connected build agents. The flaw is consistent with its CVSS 3.1 score of 8.8 (network vector, low complexity, low authenticated privileges required, no user interaction), and it affects most Pipeline-based Jenkins deployments that permit non-administrator users to write Pipelines. As of this analysis there is no public proof-of-concept, the issue is not in CISA's Known Exploited Vulnerabilities catalog, and no in-the-wild exploitation is known.

What to do: Update the Script Security Plugin via the Jenkins update center to the first release after 1415.v9a_f9b_3a_c253d. In the interim, restrict which users have permission to define and run Pipelines or other sandboxed scripts, and audit existing users with those rights. Treat pending script approvals with caution, since AST transformations execute at compile time — during compilation and approval — before any patched sandboxing of script content applies.