CVE-2026-57280
HIGH
NVD
CVSS Score
8.8
Severity
HIGH
Published
Jun 24, 2026
Vendor
unknown
Description
Jenkins Script Security Plugin 1402.v94c9ce464861 and earlier does not intercept the implicit type casts applied to the elements of typed for-each loops in sandboxed Groovy scripts, allowing attackers able to provide such scripts to invoke arbitrary constructors and bypass the sandbox protection.