{"action":"Upgrade io.jenkins.plugins:mcp-server to 0.178.vffe5a or later.","affected":[{"fixed":"0.178.vffe5a","introduced":"0"}],"component":"io.jenkins.plugins:mcp-server","cve_ids":["CVE-2026-57300"],"ecosystem":"Maven","epss":0.00281,"exploited":false,"fixed_versions":["0.178.vffe5a"],"ghsa_id":"GHSA-mpff-xhg4-vr45","id":"tcs_01M5N95FPANJ0R5D997N6F84HB","modified_at":"2026-09-25T19:30:10.047632460Z","published_at":"2026-06-24T15:31:48Z","references":["https://osv.dev/vulnerability/GHSA-mpff-xhg4-vr45","https://nvd.nist.gov/vuln/detail/CVE-2026-57300","https://github.com/jenkinsci/mcp-server-plugin/commit/ffe5ae770f3bd7e88c99aea3018263af0b2f9cc4","https://github.com/jenkinsci/mcp-server-plugin","https://github.com/jenkinsci/mcp-server-plugin/releases/tag/0.178.vffe5a_e770f3b_","https://www.jenkins.io/security/advisory/2026-06-24/#SECURITY-3759"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-mpff-xhg4-vr45","url":"https://osv.dev/vulnerability/GHSA-mpff-xhg4-vr45"}],"summary":"Jenkins MCP Server Plugin missing a permission check"}