CVE-2025-64131

HighCVSS 7.5

Published: 29/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

39th percentile - higher than 39% of all known CVEs

Summary

Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.

Risk Assessment

An attacker could hijack an authenticated user's session, potentially leading to unauthorized access to Jenkins and its associated resources, including configuration and sensitive data.

Recommendation

Update Jenkins SAML Plugin to the latest version that implements a replay cache. Until then, monitor SAML authentication logs for suspicious replays.

Other vulnerabilities in Jenkins SAML Plugin

CVE-2026-84668High
Jenkins SAML Plugin version 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data binding, allowing attackers to replace it with attacker-controlled content and authenticate as any user.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS