Skip to content
OpenAdvisories

Vendor

jfrog

65 known vulnerabilities.

Products

artifactory 54 JFrog Artifactory 8 jfrog-cli 1 Artifactory (Workers) 1 Artifactory Self-Hosted 1 Artifactory < 7.68.19 0 Artifactory < 7.63.18 0 Artifactory < 7.59.18 0 Artifactory < 7.66.0 0 Artifactory < 7.46.3 0 Artifactory < 6.23.41 0 Artifactory < 7.37.13 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-82329 Exploited Public exploit EPSS 14%

    Potential authentication bypass leading to administrative access in Artifactory

    JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

    jfrog artifactory
    KEV Sep 2, 2026
  • High 7.5
    CVE-2026-42018 Exploited

    Anonymous user token generation exposure in JFrog Artifactory

    JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

    jfrog artifactory
    KEV Sep 11, 2026
  • Medium 5.3
    CVE-2026-66384 Exploited Public exploit

    Authenticated users may write data outside the intended Docker cache path

    An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

    jfrog artifactory
    KEV Aug 27, 2026
  • High 8.1
    CVE-2026-42016 Exploited Public exploit

    Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    jfrog artifactory
    KEV Sep 11, 2026