https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:03:59.196755+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-01384 bdu:2022-01384 2026-10-09T23:03:59.218793+00:00 bdu:2022-01384 https://cve.radiocsirt.org/vuln/cnvd-2022-16711 cnvd-2022-16711 2026-10-09T23:03:59.218828+00:00 cnvd-2022-16711 https://cve.radiocsirt.org/vuln/euvd-2026-14423 EUVD-2026-14423 2026-10-09T23:03:59.218843+00:00 EUVD-2026-14423 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25197 fkie_cve-2022-25197 2026-10-09T23:03:59.218855+00:00

Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.

 https://cve.radiocsirt.org/vuln/ghsa-2587-w93g-63m2 GHSA-2587-w93g-63m2 — Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files 2026-10-09T23:03:59.218882+00:00

Affected: Maven: com.datapipe.jenkins.plugins:hashicorp-vault-plugin

Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.

This allows attackers able to control agent processes to read arbitrary files on the Jenkins controller file system.

This vulnerability is only exploitable in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier. See the [LTS upgrade guide](https://www.jenkins.io/doc/upgrade-guide/2.303/#upgrading-to-jenkins-lts-2-303-3).

 https://cve.radiocsirt.org/vuln/gsd-2022-25197 gsd-2022-25197 2026-10-09T23:03:59.218909+00:00 gsd-2022-25197