CVE-2025-64146 | Curseforge Publisher Plugin up to 1.0 on Jenkins Controller File System permission

October 29, 2025 Yanac

A vulnerability marked as critical has been reported in Curseforge Publisher Plugin up to 1.0 on Jenkins. This issue affects some unknown processing of the component Controller File System Handler. Performing manipulation results in permission issues.

This vulnerability is identified as CVE-2025-64146. The attack can only be performed from the local network. There is not any exploit available.VulDB Recent EntriesRead More