CVE-2019-1003029

CRITICAL KEV

Jenkins Script Security Plugin <1.53 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2019-1003029 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added April 25, 2022. EIP tracks 1 public exploit from researchers including Orange Tsai, Mikhail Egorov, George Noseevich, wvu, including a Metasploit module exploits/multi/http/jenkins_metaprogramming.

AI-analyzed exploit summary This Metasploit module exploits CVE-2019-1003029 in Jenkins by bypassing ACLs via dynamic routing and leveraging Groovy metaprogramming for RCE. It supports two targets: Unix in-memory execution and Java dropper payloads.

Description

A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.

Exploits (1)

metasploit WORKING POC EXCELLENT
by Orange Tsai, Mikhail Egorov, George Noseevich, wvu · rubypocunix
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkins_metaprogramming.rb

This Metasploit module exploits CVE-2019-1003029 in Jenkins by bypassing ACLs via dynamic routing and leveraging Groovy metaprogramming for RCE. It supports two targets: Unix in-memory execution and Java dropper payloads.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Jenkins <= 2.137 with Pipeline: Groovy Plugin 2.61
No auth needed
Prerequisites: Jenkins instance with vulnerable version · Network access to target
devstral-2 · analyzed Apr 30, 2026 Full analysis →

References (5)

Core 5
Core References
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/107476
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0739

Scores

CVSS v3 9.9
EPSS 0.9265
EPSS Percentile 99.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation active
Automatable no
Technical Impact total

Details

CISA KEV 2022-04-25
VulnCheck KEV 2021-10-13
InTheWild.io 2022-04-25
ENISA EUVD EUVD-2022-5866
Status published
Products (3)
jenkins/script_security < 1.53
org.jenkins-ci.plugins/script-security 0 - 1.54Maven
redhat/openshift_container_platform 3.11
Published Mar 08, 2019
KEV Added Apr 25, 2022
Tracked Since Feb 18, 2026