CVE-2026-57294
1 advisory.
Maven/com.amazon.jenkins.fleet:ec2-fleet CVE-2026-57294: medium 5.4
Jenkins EC2 Fleet Plugin has a missing permission check
Action: Upgrade com.amazon.jenkins.fleet:ec2-fleet to 4.2.3.540.va or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.3.540.va | - |
Fixed versions
| 4.2.3.540.va |
Sources
- osv: GHSA-9v77-j4xv-34gq
- https://nvd.nist.gov/vuln/detail/CVE-2026-57294
- https://github.com/jenkinsci/ec2-fleet-plugin/pull/531
- https://github.com/jenkinsci/ec2-fleet-plugin/commit/a6eedb7bc112de92bbba179c03840d845b845c82
- https://github.com/jenkinsci/ec2-fleet-plugin
- https://github.com/jenkinsci/ec2-fleet-plugin/releases/tag/4.2.3.540.va_6eedb_7b_c112
- https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3774
CVE-2026-57294 · published · modified · JSON