CVE-2026-84669

A path traversal vulnerability in the Allure Plugin for Jenkins versions 2.35.2 and earlier enables attackers with Item/Read permissions to access arbitrary files on the Jenkins controller's file system. This could lead to the exposure of sensitive information, potentially compromising the integrity of the Jenkins environment. Organizations using affected versions of Jenkins should prioritize remediation to mitigate the risk of unauthorized file access.