Description
Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user.
Published: 2026-09-02
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Jenkins SAML Plugin contains a flaw in its Stapler data binding that permits an attacker to overwrite the SAML identity provider metadata file. By substituting the file with attacker controlled content, the attacker can authenticate as any user, effectively bypassing proper identity verification and enabling arbitrary access.

Affected Systems

The vulnerability affects Jenkins SAML Plugin versions up to 4.618.v441a_27fa_46d2. Any Jenkins instance using these plugin versions is vulnerable.

Risk and Exploitability

The CVSS score of 8.8 indicates high severity, while no EPSS data and a lack of KEV listing leave the exploitation probability uncertain. The likely attack vector involves the Jenkins web interface where a malicious user can submit crafted Stapler data to overwrite the metadata file, providing authentication bypass without needing elevated privileges.

Generated by OpenCVE AI on September 3, 2026 at 11:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Jenkins SAML Plugin to the latest version that includes the fix for metadata file overwrite
  • Restrict or disable web interface access to the plugin configuration to prevent unauthorized Stapler data submissions
  • Monitor the SAML metadata directory for unexpected changes and compare file hashes against known good integrity checks

Generated by OpenCVE AI on September 3, 2026 at 11:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 03 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Jenkins Project
Jenkins Project jenkins Saml Plugin
Vendors & Products Jenkins Project
Jenkins Project jenkins Saml Plugin

Thu, 03 Sep 2026 11:30:00 +0000

Type Values Removed Values Added
Title Jenkins SAML Plugin Metadata File Overwrite Allows User Impersonation

Wed, 02 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 02 Sep 2026 10:45:00 +0000

Type Values Removed Values Added
Description Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user.
References

Subscriptions

Jenkins Project Jenkins Saml Plugin
cve-icon MITRE

Status: PUBLISHED

Assigner: jenkins

Published:

Updated: 2026-09-02T17:00:57.521Z

Reserved: 2026-09-01T21:55:27.035Z

Link: CVE-2026-84668

cve-icon Vulnrichment

Updated: 2026-09-02T17:00:43.928Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-02T16:17:31.440

Modified: 2026-09-03T17:13:16.490

Link: CVE-2026-84668

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-03T16:27:01Z

Weaknesses