Jenkins SAML Plugin vulnerabilities

2 known vulnerabilities in Jenkins SAML Plugin from Jenkins. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Jenkins SAML Plugin: Improper Access Control

  CVE-2026-84668Sep 2, 2026Jenkins

  Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user.

• 7.5 High severity

  Jenkins SAML Plugin: Authentication Bypass by Capture-replay

  CVE-2025-64131Oct 29, 2025Jenkins

  Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkin