References https://krevetk0.medium.com/jenkins-rce-poc-or-simple-pre-auth-remote-code-execution-on-the-server-d18b868a77cb https://www.secpod.com/blog/15000-jenkins-servers-exposed-to-unauthenticated-rce-attack/ https://www.jenkins.io/blog/2015/11/06/mitigating-unauthenticated-remote-code-execution-0-day-in-jenkins-cli/ https://www.upwind.io/feed/jenkins-agents-remote-code-execution-vulnerability-cve-2024-43044 https://highon.coffee/blog/jenkins-api-unauthenticated-rce-exploit/ https://github.com/petercunha/jenkins-rce https://devco.re/blog/2019/02/19/hacking-Jenkins-part2-abusing-meta-programming-for-unauthenticated-RCE-en/ https://0xdf.gitlab.io/2019/02/27/playing-with-jenkins-rce-vulnerability.html https://www.splunk.com/en_us/blog/security/security-insights-jenkins-cve-2024-23897-rce.html https://blog.pentesteracademy.com/jenkins-ci-unauthenticated-rce-69e0651621b
Related VulnerabilitiesJenkins 代码执行漏洞(CVE-2026-84645)PoCCVE-2019-1003030: Jenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationPoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCEJenkins /view 文件读取漏洞(CVE-2026-53435)PoCCVE-2026-27771: Gitea Container Registry - Unauthorized Private Image AccessPoCCVE-2025-55303: Astro - Unauthorized Third-Party Image AccessPoCCVE-2023-3277: MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation(CVE-2025-59474)Jenkins侧边栏权限绕过漏洞bt742-pma-unauthorized-access: BT742 PMA Unauthorized Accesscouchdb-unauthorized: CouchDB Unauthorizedqizhi-fortressaircraft-unauthorized: qizhi fortressaircraft unauthorizednacos-unauthorized-config-download: Nacos 未授权下载配置信息PoCCVE-2017-1000353: Jenkins CLI - Java Deserialization