GitHub Advisoryadvisory · Maven

GHSA-fmjp-mw89-c6h6 Jenkins LDAP Plugin follows LDAP referrals

MEDIUM Published 2026-05-27 Modified 2026-07-01 Official page ↗
Aliases
CVE-2026-48916
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:ldap
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-918
Reviewed
2026-07-01

Affected packages

• Maven org.jenkins-ci.plugins:ldap: < 807.809.vd3a → fixed in 807.809.vd3a

Description

Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals from the configured LDAP server. These can forward to an RMI URL that causes Jenkins to deserialize attacker-controlled data, resulting in Remote Code Execution (RCE) on the Jenkins controller if deserialization "gadgets" are available on the classpath. This allows attackers able to control the configured LDAP server, or able to perform a machine-in-the-middle attack, to execute code on the Jenkins controller. LDAP Plugin 807.809.vd3a_4e5e4ec98 no longer follows LDAP referrals.

Related

Alias · CVE (1)

  • CVE-2026-48916 Jenkins LDAP Plugin 807.v7d7de30930cf and earlier follows LDAP referrals. vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References