Skip to content
OpenAdvisories

Vendor

jfrog

65 known vulnerabilities.

Products

artifactory 54 JFrog Artifactory 8 jfrog-cli 1 Artifactory (Workers) 1 Artifactory Self-Hosted 1 Artifactory < 7.68.19 0 Artifactory < 7.63.18 0 Artifactory < 7.59.18 0 Artifactory < 7.66.0 0 Artifactory < 7.46.3 0 Artifactory < 6.23.41 0 Artifactory < 7.37.13 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-82329 Exploited Public exploit EPSS 14%

    Potential authentication bypass leading to administrative access in Artifactory

    JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

    jfrog artifactory
    KEV Sep 2, 2026
  • Medium 5.3
    CVE-2026-66384 Exploited Public exploit

    Authenticated users may write data outside the intended Docker cache path

    An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

    jfrog artifactory
    KEV Aug 27, 2026
  • High 8.8
    CVE-2026-65616 Public exploit

    Potential privilege escalation to JFrog administrator privileges

    Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

    jfrog artifactory
  • High 8.1
    CVE-2026-42016 Exploited Public exploit

    Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    jfrog artifactory
    KEV Sep 11, 2026