CVE-2026-57282
Description
Jenkins Git client Plugin 6.6.0 and earlier does not correctly escape the workspace directory name when it is embedded into a generated SSH wrapper script, allowing attackers able to control the name of a build's working directory to execute arbitrary operating system commands on the agent.
Summary dbcve.org
The Jenkins Git client Plugin 6.6.0 and earlier fails to properly escape workspace directory names when they are embedded into generated SSH wrapper scripts. An attacker who can control the workspace directory name can inject arbitrary OS commands that will be executed on the Jenkins agent.
Mitigation
Upgrade the Jenkins Git client Plugin to a patched version when available, and restrict or sanitize build workspace directory names to prevent untrusted users from controlling them.