CVE-2026-33002

Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3674	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:jenkins:jenkins:::::lts:::*
	cpe:2.3:a:jenkins:jenkins:::::-:::*

History

17 Jun 2026, 10:36

Type	Values Removed	Values Added
Summary		(es) Jenkins 2.442 hasta 2.554 (ambos inclusive), LTS 2.426.3 hasta LTS 2.541.2 (ambos inclusive) realiza la validación de origen de las solicitudes realizadas a través del endpoint WebSocket de la CLI calculando el origen esperado para la comparación utilizando los encabezados de solicitud HTTP Host o X-Forwarded-Host, lo que lo hace vulnerable a ataques de reencuadernación de DNS que permiten eludir la validación de origen.

21 Mar 2026, 00:18

Type	Values Removed	Values Added
First Time		Jenkins jenkins Jenkins
References	~~() https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3674 -~~	() https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3674 - Vendor Advisory
CPE		cpe:2.3:a:jenkins:jenkins:::::lts:::* cpe:2.3:a:jenkins:jenkins:::::-:::*

19 Mar 2026, 15:16

Type	Values Removed	Values Added
CWE		CWE-350
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 7.5

18 Mar 2026, 16:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-18 16:16

Updated : 2026-06-17 10:36

NVD link : CVE-2026-33002

Mitre link : CVE-2026-33002

CVE.ORG link : CVE-2026-33002

JSON object : View

Products Affected

jenkins

jenkins

CWE

CWE-350

Reliance on Reverse DNS Resolution for a Security-Critical Action

{"id": "CVE-2026-33002", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-33002", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-19T14:43:30.815362Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "affected": [{"source": "jenkinsci-cert@googlegroups.com", "affectedData": [{"vendor": "Jenkins Project", "product": "Jenkins", "versions": [{"status": "unaffected", "version": "0", "lessThan": "2.426.3", "versionType": "maven"}, {"status": "unaffected", "version": "2.427", "lessThan": "2.442", "versionType": "maven"}, {"status": "unaffected", "version": "2.555", "lessThan": "*", "versionType": "maven"}, {"status": "unaffected", "version": "2.541.3", "lessThan": "2.541.*", "versionType": "maven"}], "defaultStatus": "affected"}]}], "published": "2026-03-18T16:16:28.187", "references": [{"url": "https://www.jenkins.io/security/advisory/2026-03-18/#SECURITY-3674", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-350"}]}], "descriptions": [{"lang": "en", "value": "Jenkins 2.442 through 2.554 (both inclusive), LTS 2.426.3 through LTS 2.541.2 (both inclusive) performs origin validation of requests made through the CLI WebSocket endpoint by computing the expected origin for comparison using the Host or X-Forwarded-Host HTTP request headers, making it vulnerable to DNS rebinding attacks that allow bypassing origin validation."}, {"lang": "es", "value": "Jenkins 2.442 hasta 2.554 (ambos inclusive), LTS 2.426.3 hasta LTS 2.541.2 (ambos inclusive) realiza la validaci\u00f3n de origen de las solicitudes realizadas a trav\u00e9s del endpoint WebSocket de la CLI calculando el origen esperado para la comparaci\u00f3n utilizando los encabezados de solicitud HTTP Host o X-Forwarded-Host, lo que lo hace vulnerable a ataques de reencuadernaci\u00f3n de DNS que permiten eludir la validaci\u00f3n de origen."}], "lastModified": "2026-06-17T10:36:44.657", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B3638046-C2A7-4BEF-95E1-6E5C493DAA39", "versionEndExcluding": "2.541.3", "versionStartIncluding": "2.426.3"}, {"criteria": "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "7C72BD61-34BC-4609-9019-4C342792D538", "versionEndExcluding": "2.555", "versionStartIncluding": "2.442"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}