CVE-2026-84662

The Jenkins LDAP Plugin versions 807.809.vd3a_4e5e4ec98 and earlier are vulnerable due to improper handling of user-specified URLs through Stapler data binding, potentially allowing attackers to redirect connections to malicious endpoints. This vulnerability could lead to unauthorized access or data exposure, making it critical for organizations using Jenkins with this plugin to prioritize remediation. Users of affected Jenkins versions should assess their configurations and apply necessary updates to mitigate the risk.