The “isNameEditable” value is not checked before doing the real rename action on the renameTo method:

https://github.com/jenkinsci/jenkins/blob/38e94d197e65af66da67afdc5ebb5d8c0fcf3377/core/src/main/java/hudson/model/AbstractItem.java#L353

The rename method can lead to very bad issues if it’s used with item that must not be renamed, the “isNameEditable” must be check before doing any rename action.

I did a PR with code changes and unit tests:  https://github.com/jenkinsci/jenkins/pull/4122