Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Jenkins Project | Jenkins GitLab Plugin | unaffected |
|
No data.
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Wed, 16 Sep 2026 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Jenkins GitLab Plugin 1.2149.vcfc32c82b_f7f and earlier caches the GitLab API client built for alternative GitLab API token credentials under a cache key derived from the credentials ID alone, omitting the folder in which the credentials are resolved, allowing attackers with Item/Configure permission to access GitLab API token credentials they are not entitled to use. | |
| References |
|
Subscriptions
No data.
MITRE
Status: PUBLISHED
Assigner: jenkins
Published:
Updated: 2026-09-16T13:53:10.006Z
Reserved: 2026-09-15T16:29:44.795Z
Link: CVE-2026-92133
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-09-16T14:17:15.300
Modified: 2026-09-16T14:17:15.300
Link: CVE-2026-92133
Redhat
No data.
OpenCVE Enrichment
No data.
No weakness.