Jenkins Active Directory Plugin 2.41 and earlier follows LDAP referrals by default.Referenceshttps://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3659