CVE-2019-10418: Jenkins Kubernetes Pipeline

Critical severity, CVSS 9.9. EPSS: 1.2% chance of exploitation in the next 30 days.

Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection.

Affected products

• Jenkins Kubernetes Pipeline: up to and including 1.6

Published 2019-09-25. Last modified 2026-06-17.