CVE-2025-24401: Jenkins Folder-Based Authorization Strategy

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Jenkins Folder-based Authorization Strategy Plugin 217.vd5b_18537403e and earlier does not verify that permissions configured to be granted are enabled, potentially allowing users formerly granted (typically optional permissions, like Overall/Manage) to access functionality they're no longer entitled to.

Affected products

• Jenkins Folder-Based Authorization Strategy: up to and including 217.vd5b_18537403e

Published 2025-01-22. Last modified 2026-06-17.