What is GHSA-c5q4-vhqv-p6fj?

GHSA-c5q4-vhqv-p6fj is a security advisory published by GitHub Security Advisories with Medium severity. In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the...

Which CVE IDs does GHSA-c5q4-vhqv-p6fj cover?

GHSA-c5q4-vhqv-p6fj covers the following CVE IDs: CVE-2026-84657. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c5q4-vhqv-p6fj?

GHSA-c5q4-vhqv-p6fj has a CVSS v3 base score of 4.2, published by GitHub Security Advisories.

GHSA-c5q4-vhqv-p6fjMediumCVSS 4.2

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the...

Vendor

GitHub Security Advisories

Published

September 2, 2026

Last Modified

September 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-84657 →

📋 Description

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-84657
https://www.jenkins.io/security/advisory/2026-09-02/#SECURITY-4015
https://github.com/advisories/GHSA-c5q4-vhqv-p6fj