Cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3ajenkinsjenkins-/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 25 Oct 2026 12:41:20 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgJenkins: Arbitrary file read via CLI @ expansion (CVE-2024-23897)https://feed.craftedsignal.io/briefs/2026-10-jenkins-cve-2024-23897/Sun, 25 Oct 2026 12:41:20 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-jenkins-cve-2024-23897/Jenkins versions prior to 2.442 and LTS 2.426.3 contain an arbitrary file read vulnerability caused by the CLI parser improperly expanding @ file references, allowing unauthenticated attackers to read contents from the Jenkins controller filesystem.Jenkins controller instances are vulnerable to an arbitrary file read vulnerability (CVE-2024-23897) due to a feature in the Jenkins CLI parser that replaces an '@' character followed by a file path with the content of that file. This feature is enabled by default and does not require authentication. The impact varies based on attacker permissions: users with Overall/Read permission can read full files, while unauthenticated users can read the first few lines of files depending on the CLI commands available. Public exploit code for this vulnerability is currently available.

Impact

Successful exploitation allows unauthenticated attackers to read sensitive files from the Jenkins controller filesystem. This may lead to the exposure of credentials, environment variables, configuration files, or other sensitive system data.

Recommendation

  • Upgrade Jenkins to version 2.442 or later, or Jenkins LTS to 2.426.3 or later, immediately to disable the vulnerable CLI expansion feature.
  • If patching is not immediately feasible, restrict access to the Jenkins CLI and HTTP endpoints to trusted networks only.
  • Review Jenkins access logs for anomalous requests to the CLI endpoint.
]]>criticaladvisoryvulnerabilityarbitrary-file-readjenkinscve-2024-23897