A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2017-1000353

Jenkins Remote Code Execution Vulnerability

Published
2025-10-02
Modified
2026-07-31
Sources
cisa-kev

Summary

Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.