CVE-2026-84663: Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin

Medium severity, CVSS 5.4. EPSS: 0.1% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline: Groovy Libraries Plugin 798.v5cc688825312 and earlier allows attackers to delete shared library caches.

Affected products

• Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin: up to and including 798.v5cc688825312

Published 2026-09-02. Last modified 2026-09-03.