CVE lookup

CVE-2026-84645

Pruva has a verified reproduction for CVE-2026-84645: Jenkins XStream deserialization of nested PersistenceRoot objects leads to RCE via Stapler (SECURITY-3972). The canonical evidence record is REPRO-2026-00343.

REPRO

REPRO-2026-00343

Package

jenkinsci/jenkins · github

Severity

HIGH

Status

published

Open verified reproduction Plain text for agents NVD source