Jenkins ThinBackup Plugin vulnerabilities

1 known vulnerability in Jenkins ThinBackup Plugin from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Jenkins ThinBackup Plugin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-84667Sep 2, 2026Jenkins

  Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attackers to redirect backup writes to an attacker-specified directory and to include arbitrary files from the Jenkins contr