diff --git a/src/main/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApproval.java b/src/main/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApproval.java
index e80efedf..74690ce4 100644
--- a/src/main/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApproval.java
+++ b/src/main/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApproval.java
@@ -879,7 +879,9 @@ synchronized boolean isClasspathEntryApproved(URL url) {
      * @return {@code script}, for convenience
      */
     public synchronized String preapprove(@NonNull String script, @NonNull Language language) {
-        approvedScriptHashes.add(DEFAULT_HASHER.hash(script, language.getName()));
+        String hash = DEFAULT_HASHER.hash(script, language.getName());
+        approvedScriptHashes.add(hash);
+        removePendingScript(hash);
         return script;
     }
 
diff --git a/src/test/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApprovalTest.java b/src/test/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApprovalTest.java
index e25bd110..f03180a7 100644
--- a/src/test/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApprovalTest.java
+++ b/src/test/java/org/jenkinsci/plugins/scriptsecurity/scripts/ScriptApprovalTest.java
@@ -86,6 +86,31 @@ public class ScriptApprovalTest extends AbstractApprovalTest<ScriptApprovalTest.
         script("").use();
     }
 
+    @Test public void preapproveRemovesPendingScript() throws Exception {
+        configureSecurity();
+        ScriptApproval sa = ScriptApproval.get();
+        String testScript = "println 'test script'";
+
+        // First create a pending script by configuring it without admin approval
+        sa.configuring(testScript, GroovyLanguage.get(), ApprovalContext.create(), false);
+
+        // Verify the script is in pending list
+        assertEquals(1, sa.getPendingScripts().size());
+        ScriptApproval.PendingScript pending = sa.getPendingScripts().iterator().next();
+        assertEquals(testScript, pending.script);
+        String hash = pending.getHash();
+
+        // Now preapprove the script
+        sa.preapprove(testScript, GroovyLanguage.get());
+
+        // Verify the script hash is approved
+        assertTrue(sa.isScriptHashApproved(hash));
+
+        // Verify the script is removed from pending list (this was the bug)
+        assertEquals("Pending scripts should be empty after preapprove",
+                     0, sa.getPendingScripts().size());
+    }
+
     @Issue("JENKINS-46764")
     @Test
     @LocalData("malformedScriptApproval")