CVE-2017-1000096

CVE-2017-1000096 describes an arbitrary code execution vulnerability in Jenkins Pipeline scripts. The flaw stemmed from incomplete sandbox protection, allowing constructors, instance variable initializers, and instance initializers to execute arbitrary code, affecting Jenkins users with Pipeline configuration permissions or trusted committers. Rated 8.8 HIGH, this vulnerability has a network attack vector with low complexity and no user interaction, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.