CVE-2026-70447: Medium severity Jenkins AWS CodeBuild Plugin vulnerability
Published Aug 5, 2026
·Updated
Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.
Affected Software
1 affected component
Jenkins AWS CodeBuild Plugin<=0.59
Event History
Aug 5, 2026
CVE Published
via MITRE·05:40 PM
Data Sourced
via MITRE·05:40 PM
Description
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-70447?
CVE-2026-70447 has a risk rating of 26, indicating a significant security concern.
2
How do I fix CVE-2026-70447?
To fix CVE-2026-70447, update the Jenkins AWS CodeBuild Plugin to version 0.60 or later.
3
Who is affected by CVE-2026-70447?
Any Jenkins instance using the AWS CodeBuild Plugin version 0.59 or earlier is affected by CVE-2026-70447.
4
What type of attacks can occur due to CVE-2026-70447?
CVE-2026-70447 allows attackers with Overall/Read permission to enumerate sensitive credentials IDs stored in Jenkins.
5
Is it necessary to apply the update for CVE-2026-70447 immediately?
Yes, it is important to apply the update for CVE-2026-70447 immediately to protect against unauthorized access to credentials.