All vulnerabilities
CVE-2026-57294GHSA-9v77-j4xv-34gq

com.amazon.jenkins.fleet:ec2-fleet: Jenkins EC2 Fleet Plugin has a missing permission check

Jenkins Project com.amazon.jenkins.fleet:ec2-fleetmavenApplications & CMS
Open in ThreatlineRecord JSON
CVSS
5.4Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 16% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in4.2.3.540.vaFixed versionGitHub
Published24 Jun 2026Updated 25 Sep 2026CVE List

What fixes it

  • 4.2.3.540.vacom.amazon.jenkins.fleet:ec2-fleet, mavenGitHub<dependency><groupId>com.amazon.jenkins.fleet</groupId><artifactId>ec2-fleet</artifactId><version>4.2.3.540.va</version></dependency>
  • 4.2.3.540.vacom.amazon.jenkins.fleet:ec2-fleet, MavenOSV<dependency><groupId>com.amazon.jenkins.fleet</groupId><artifactId>ec2-fleet</artifactId><version>4.2.3.540.va</version></dependency>

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Jenkins EC2 Fleet Plugin 4.2.3.539.v8fedff2a_81c3 and earlier does not perform permission checks in several HTTP endpoints used to validate cloud configurations.

This allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing AWS credentials stored in Jenkins.

Additionally, these HTTP endpoints do not require POST requests, resulting in a cross-site request forgery (CSRF) vulnerability.

EC2 Fleet Plugin 4.2.3.540.va_6eedb_7b_c112 requires Overall/Administer permission and POST requests to perform these form validation actions.

Text from GitHub Advisory Database

Affected versions 53

  • com.amazon.jenkins.fleet:ec2-fleet, maven< 4.2.3.540.vaGitHub
  • Jenkins EC2 Fleet Pluginaffected: all versions through 4.2.3.539.v8fedff2a_81c3CVE List
  • com.amazon.jenkins.fleet:ec2-fleet, Mavenfrom first release, fixed in 4.2.3.540.vaOSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.3OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.4OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.5OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.6OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.7OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.8OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.1.9OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.10.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.10.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.10.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.11.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.11.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.11.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.12.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.13.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.14.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.15.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.16.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.16.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.16.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.17.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.17.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.17.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.17.3OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.2.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.2.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.2.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.3.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.3.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.4.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.4.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.5.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.6.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.7.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.7.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.7.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.8.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.8.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.9.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.9.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven1.9.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.0.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.0.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.0.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.1.0OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.1.1OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.1.2OSV
  • com.amazon.jenkins.fleet:ec2-fleet, Maven2.1.3OSV

References 6