Skip to content
OpenAdvisories

Vendor

jfrog

65 known vulnerabilities.

Products

artifactory 54 JFrog Artifactory 8 jfrog-cli 1 Artifactory (Workers) 1 Artifactory Self-Hosted 1 Artifactory < 7.68.19 0 Artifactory < 7.63.18 0 Artifactory < 7.59.18 0 Artifactory < 7.66.0 0 Artifactory < 7.46.3 0 Artifactory < 6.23.41 0 Artifactory < 7.37.13 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-65616 Public exploit

    Potential privilege escalation to JFrog administrator privileges

    Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

    jfrog artifactory
  • High 8.1
    CVE-2026-42016 Exploited Public exploit

    Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

    JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

    jfrog artifactory
    KEV Sep 11, 2026