CVE-2026-70442: Jenkins Project Jenkins Google Chat Notification Plugin

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.

Affected products

• Jenkins Project Jenkins Google Chat Notification Plugin: up to and including 166.ve6b_de280f2e8

Published 2026-08-05. Last modified 2026-08-31.