CVE-2019-10356: A sandbox bypass vulnerability in Jenkins Script Security Plugin 1.61 and earlier related to the handling o...

Security readout for executives and security teams

Jenkins Script Security Plugin 1.61 and earlier could let someone escape the intended script sandbox and run arbitrary code. In business terms, a weakness in CI/CD controls could turn limited script access into broader control over a Jenkins environment. Exposure is likely limited to Jenkins deployments using Script Security Plugin 1.61 or earlier, especially where users, jobs, or plugins can submit or modify sandboxed Groovy scripts. Treat as high priority where Jenkins supports software delivery, production deployment, or credentialed automation. The issue affects a control boundary intended to contain untrusted scripts. Mitigation focus: Check Jenkins advisory SECURITY-1465 (2) and apply the vendor-recommended fixed plugin version.; If using Red Hat-distributed Jenkins components, review RHSA-2019:2594, RHSA-2019:2651, and RHSA-2019:2662.; Restrict script creation, job configuration, and script approval permissions to trusted administrators..

Prepared

Jun 6, 2026, 14:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.