Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-42017

Privilege escalation via JFrog Worker event token exposure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jfrog artifactory

Default version status: unaffected

  • 0 to < 7.133.21affected
  • 7.146.0 to < 7.146.8affected

References