Jenkins Active Directory Plugin 2.41 and earlier deserializes data from LDAP referrals without validation.Referenceshttps://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3659
