{"id":"CVE-2026-92130","title":"Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture cred…","summary":"Jenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture cred…","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-863"],"vendor":"Jenkins Project","product":"Jenkins Pipeline: Multibranch Plugin","affected":["jenkins_pipeline_multibranch_plugin <= 841.vec5b_9e1806ec"],"published":"2026-09-16","updated":"2026-09-18","sourceUpdated":"2026-09-18T13:46:13.937","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92130","references":[{"url":"https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3729","label":"jenkinsci-cert@googlegroups.com"}],"tags":["nvd","cve.org"],"epss":0.00221,"epssPercentile":0.11205,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-16T19:45:37.950753Z"},"ingestedAt":"2026-09-16T14:57:28.022Z","slug":"CVE-2026-92130","body":"## Overview\n\nJenkins Pipeline: Multibranch Plugin 841.vec5b_9e1806ec and earlier does not set the appropriate context for credentials lookup in the resolveScm Pipeline step, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":17,"depthScoreParts":{"impact":17.1,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":205720,"id":"CVE-2026-92130","ts":1789589117705,"field":"cvss","old":null,"new":"3.1"},{"seq":205719,"id":"CVE-2026-92130","ts":1789589117705,"field":"severity","old":"none","new":"low"}]}