CVE-2019-1003029: Jenkins Script Security Plugin Sandbox Bypass Vulnerability

Required action (CISA's text)

Apply updates per vendor instructions.

Description (NVD)

Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.

SOURCES

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Other Jenkins flaws

• CVE-2017-1000353: Jenkins Remote Code Execution Vulnerability
• CVE-2024-23897: Jenkins Command Line Interface (CLI) Path Traversal Vulnerability
• CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability
• CVE-2019-1003030: Jenkins Matrix Project Plugin Remote Code Execution Vulnerability
• CVE-2018-1000861: Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.