Jfrog Artifactory vulnerabilities

CVE-2026-82329 Critical · 9.8 KEV Urgent · 72 Public exploit CWE-287 Aug 28, 2026

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

CVE-2026-70550 Medium · 6.5 CWE-862 Aug 25, 2026

Potential unauthorized access to private Composer repository metadata in JFrog Artifactory

An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are not authorized to read. The issue affects confidentiality and has been addressed in fixed Artifactory versions.

CVE-2026-70548 Low · 3.5 CWE-918 Aug 25, 2026

SSRF In CocoaPods Via JFrog Artifactory External Dependency

Under specific circumstances, low-level user can run request to remote CocoaPods repos via JFrog Artifactory External Dependency.

CVE-2026-70551 High · 8.5 CWE-918 Aug 25, 2026

Server-Side Request Forgery Via VCS remote download in JFrog Artifactory

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.

CVE-2026-69104 High · 7.6 CWE-862 Aug 25, 2026

Potential unauthorized repository migration in JFrog Artifactory

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

CVE-2026-69106 High · 8.8 CWE-20 Aug 12, 2026

Potential cache poisoning in JFrog Artifactory

A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.

CVE-2026-42018 High · 7.5 KEV High · 62 Public exploit CWE-287 Aug 12, 2026

JFrog Artifactory Improper Authentication Vulnerability

JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

CVE-2026-70547 Medium · 4.3 CWE-862 Aug 12, 2026

Potential unauthorized metadata exposure in JFrog Artifactory

An authenticated user without repository read permission may access package metadata under specific conditions.

CVE-2026-69107 Medium · 5.9 CWE-862 Aug 12, 2026

Potential unauthorized artifact access in JFrog Artifactory

An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.

CVE-2026-69105 High · 8.1 CWE-345 Aug 12, 2026

Potential package cache integrity issue in JFrog Artifactory

An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.

CVE-2026-68759 High · 7.2 CWE-347 Aug 12, 2026

Integration credential holders may impersonate users in JFrog Access

A holder of a valid integration credential may impersonate other users under specific conditions.

CVE-2026-68758 Medium · 6.5 CWE-862 Aug 12, 2026

Authenticated users may access restricted Artifactory support information

A low-privileged authenticated user may access restricted support information under specific conditions.

CVE-2026-66016 Medium · 6.7 CWE-312 Aug 12, 2026

Rendered Artifactory Helm manifests may contain generated TLS private keys

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.

CVE-2026-66384 Medium · 5.3 KEV High · 52 Public exploit CWE-22 Aug 12, 2026

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

CVE-2026-65926 Low · 3.1 CWE-862 Aug 12, 2026

Private Release Bundle versions may be disclosed under specific configurations

An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.

CVE-2026-68760 Medium · 5.3 CWE-287 Aug 12, 2026

Potential remember-me authentication bypass in JFrog Artifactory

An unauthenticated user may bypass authentication under specific cache conditions.

CVE-2026-68757 High · 7.5 CWE-347 Aug 12, 2026

Improper Verification of Cryptographic Signature in Jfrog Artifactory

A user with access to a valid SAML response may impersonate another user under specific conditions.

CVE-2026-68756 Medium · 6.6 CWE-502 Aug 12, 2026

Potential insecure deserialization in JFrog Artifactory

A party with write access to stored session data may affect JFrog Artifactory under specific conditions.

CVE-2026-68755 Medium · 4.3 CWE-863 Aug 12, 2026

Bundle writers may alter trusted release information in JFrog Artifactory

A bundle writer may create misleading release promotion information under specific conditions.

CVE-2026-68754 Medium · 6.5 CWE-862 Aug 12, 2026

Publishers without delete permission can overwrite docker layer information

A repository publisher without delete permission may modify protected package content under specific conditions.

CVE-2026-68753 Medium · 5.3 CWE-862 Aug 12, 2026

Anonymous users may access restricted Artifactory content under specific configurations

An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.

CVE-2026-68752 High · 7.2 CWE-269 Aug 12, 2026

Project Resource Managers may escalate privileges in JFrog Artifactory

A Project Resource Manager may gain broader administrative privileges under specific conditions.

CVE-2026-66382 Medium · 4.3 CWE-22 Aug 12, 2026

Authenticated users may write files outside the intended Artifactory work directory

An authenticated user may write files outside the intended Artifactory work directory under specific conditions.

CVE-2026-66381 Medium · 5.3 CWE-22 Aug 12, 2026

Path Traversal in Jfrog Artifactory

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.

CVE-2026-66380 Medium · 4.3 CWE-862 Aug 12, 2026

Authenticated users may access private OCI referrer metadata

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.