CVE-2026-84675

The Jenkins TICS Plugin versions up to 2025.1.1 are vulnerable to an OS command injection flaw that enables attackers with control over build environment variables to execute arbitrary commands on the build agent. This vulnerability poses a significant risk, as it can lead to unauthorized access and manipulation of the system. Organizations using affected versions of Jenkins should prioritize patching this vulnerability to safeguard their build environments.