The host is installed with Jenkins LTS 2.222.1 before 2.426.3 or Jenkins rolling release 2.217 before 2.442 and is prone to a cross-site websocket hijacking vulnerability. A flaw is present in the application, which fails to properly handle validation of requests made through the CLI WebSocket endpoint. Successful exploitation could allow an attackers to execute CLI commands on the Jenkins controller.