{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-70436", "assignerOrgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "state": "PUBLISHED", "assignerShortName": "jenkins", "dateReserved": "2026-08-04T14:13:20.602Z", "datePublished": "2026-08-05T17:40:33.989Z", "dateUpdated": "2026-08-05T17:40:33.989Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "39769cd5-e6e2-4dc8-927e-97b3aa056f5b", "shortName": "jenkins", "dateUpdated": "2026-08-05T17:40:33.989Z"}, "affected": [{"vendor": "Jenkins Project", "product": "Jenkins External Workspace Manager Plugin", "versions": [{"version": "0", "versionType": "maven", "lessThanOrEqual": "1.4.1", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 and earlier) or performs an improper permission check (1.4.1) when providing access to externally-managed workspaces through the workspace browser, allowing attackers with Overall/Read permission to read files in workspaces they are not authorized to access."}], "references": [{"name": "Jenkins Security Advisory 2026-08-05", "url": "https://www.jenkins.io/security/advisory/2026-08-05/#SECURITY-3907", "tags": ["vendor-advisory"]}]}}}

{}

{}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,1.4.1]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Jenkins External Workspace Manager Plugin", "source": "cna", "vendor": "Jenkins Project"}, "product": "jenkins_external_workspace_manager_plugin", "vendor": "jenkins_project"}], "created": "2026-08-05T19:45:03.098894+00:00", "title": "Permission Check Bypass in Jenkins External Workspace Manager Plugin Allows Unauthorized Workspace File Disclosure", "updated": "2026-08-05T19:45:03.190735+00:00", "vendors": ["jenkins_project", "jenkins_project$PRODUCT$jenkins_external_workspace_manager_plugin"], "weaknesses": ["CWE-285", "CWE-200"]}