CVE-2022-25197: Jenkins Hashicorp Vault

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system.

Affected products

• Jenkins Hashicorp Vault: up to and including 336.v182c0fbaaeb7

Published 2022-02-15. Last modified 2026-06-17.