CVE-2019-10328: Jenkins Pipeline Remote Loader

Critical severity, CVSS 9.9. EPSS: 1.9% chance of exploitation in the next 30 days.

Jenkins Pipeline Remote Loader Plugin 1.4 and earlier provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

Affected products

• Jenkins Pipeline Remote Loader: up to and including 1.4

Published 2019-05-31. Last modified 2026-06-17.