AI agent vulnerability · Other MCP servers and tools

CVE-2025-64132: Jenkins MCP Server Plugin does not perform permission checks in multiple MCP tools

mediumCVSS 3.1 5.4GHSA-mrpq-9jr3-rqq9

Jenkins MCP Server Plugin 0.84.v50ca24ef83f2 and earlier does not perform permission checks in several MCP tools. This allows to do the following: - Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission (getJobScm).

Published Oct 29, 2025 · Updated Nov 5, 2025

Affected packages

io.jenkins.plugins:mcp-server

Ecosystem: Maven
Affected: < 0.86.v7d3355e6a
Fixed in: 0.86.v7d3355e6a
Check: mvn dependency:tree -Dincludes=io.jenkins.plugins:mcp-server

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Jenkins MCP Server Plugin 0.84.v50ca_24ef83f2 and earlier does not perform permission checks in several MCP tools.

This allows to do the following:

Attackers with Item/Read permission can obtain information about the configured SCM in a job despite lacking Item/Extended Read permission (getJobScm).

Attackers with Item/Read permission can trigger new builds of a job despite lacking Item/Build permission (triggerBuild).

Attackers without Overall/Read permission can retrieve the names of configured clouds (getStatus).

MCP Server Plugin 0.86.v7d3355e6a_a_18 performs permission checks for the affected MCP tools.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Other MCP servers and tools vulnerabilities

All Other MCP servers and tools entries