Skip to content
OpenAdvisories
Medium · 6.6 CVE-2026-48918 EUVD-2026-32509GHSA-wrhr-54p6-q97f

Jenkins Active Directory Plugin follows LDAP referrals by default

Published May 27, 2026 · Updated May 27, 2026 · Assigned by jenkins

Vendor: Jenkins Project Product: Jenkins Active Directory Plugin Package: org.jenkins-ci.plugins:active-directory Category: Web / CMS Ecosystem: Maven

Description

Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.

Affected products

VendorProductAffectedFixed
Jenkins Project Jenkins Active Directory Plugin ≤ 2.41 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.jenkins-ci.plugins:active-directory < 2.41.1 2.41.1 GHSA-wrhr-54p6-q97f

Advisories 1

References