CVE-2020-2159: Jenkins Cryptomove

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Jenkins CryptoMove Plugin 0.1.33 and earlier allows attackers with Job/Configure access to execute arbitrary OS commands on the Jenkins master as the OS user account running Jenkins.

Affected products

• Jenkins Cryptomove: up to and including 0.1.33

Published 2020-03-09. Last modified 2026-06-17.