Vulnerability Bulletins |
CVE-2026-92133 |
|
| Affected software | JENKINS |
| Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure permission to access GitLab API token credentials they are not entitled to use. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-92133 | |