Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jenkins Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2026-33001 - Vulnerability Database
Jenkins

Jenkins Improper Link Resolution Before File Access (Link Following) Vulnerability - CVE-2026-33001

High
Reference: CVE-2026-33001
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-33001
Title: Jenkins Improper Link Resolution Before File Access (Link Following) Vulnerability
Overview:

Jenkins 2.554 and earlier LTS 2.541.2 and earlier does not safely handle symbolic links during the extraction of .tar and .tar.gz archives allowing crafted archives to write files to arbitrary locations on the filesystem restricted only by file system access permissions of the user running Jenkins. This can be exploited to deploy malicious scripts or plugins on the controller by attackers with Item/Configure permission or able to control agent processes.