CVE-2026-48920
Email File Read Vulnerability in Jenkins Email Extension Plugin
Publication date: 2026-05-27
Last updated on: 2026-05-27
Assigner: Jenkins Project
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| jenkinsci | email_extension_plugin | to 1933.v45cec755423f (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Jenkins Email Extension Plugin version 1933.v45cec755423f and earlier. It allows attackers who can control the email content to inline images using the `data-inline` attribute with `base64` encoding without any restrictions on the image URLs. Specifically, attackers can specify `file:` URLs for images, which enables them to read arbitrary files from the Jenkins controller's filesystem.
How can this vulnerability impact me? :
The vulnerability can allow an attacker who controls email content to read arbitrary files on the Jenkins controller filesystem by embedding `file:` URLs in inlined images. This can lead to unauthorized disclosure of sensitive information stored on the Jenkins server, potentially exposing credentials, configuration files, or other confidential data.