The Jenkins MCP Server Plugin fails to enforce a permission check when a user requests the replay scripts for a pipeline. Because the plugin relies on the Item/Read permission granted to the user, anyone who can read a job can also download the entire script that defines the job's pipeline. This leak exposes the build logic stored in the script and creates an information‑disclosure weakness, which can be classified as improper access control (CWE‑284).

All installations of the Jenkins MCP Server Plugin version 0.177 and earlier are affected. The plugin is distributed as part of the Jenkins Project ecosystem. Administrators should verify the version in use and consider moving to a more recent release if one is available.

The CVSS score is 4.3, EPSS score is not available, making it hard to assess the exploitation likelihood. Because the issue is not listed in the CISA KEV catalog, there are no confirmed public exploits at this time. The likely attack vector involves a user who already has Item/Read permission to a job; such a user can invoke the plugin’s API to retrieve the replay script if the endpoint is reachable. The weak authorization allows the attacker to exfiltrate the referenced script files.