CVE-2026-57296

Maven/org.jenkins-ci.plugins:external-workspace-manager CVE-2026-57296: high 8.8

Jenkins External Workspace Manager Plugin has a path traversal vulnerability

Action: Upgrade org.jenkins-ci.plugins:external-workspace-manager to 1.4.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-hrmj-8fm9-cg8x
• https://nvd.nist.gov/vuln/detail/CVE-2026-57296
• https://github.com/jenkinsci/external-workspace-manager-plugin/commit/2fccbbd398cf209f5931b48e006659dbee86ddf2
• https://github.com/jenkinsci/external-workspace-manager-plugin
• https://github.com/jenkinsci/external-workspace-manager-plugin/releases/tag/external-workspace-manager-1.4.0
• https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3777

CVE-2026-57296 · published 2026-06-24T15:31:47Z · modified 2026-09-25T19:15:04.533539960Z · JSON