Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-65921

Potential path traversal leading to unauthorized file writes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jfrog artifactory

Default version status: unaffected

  • 0 to < 7.111.18affected
  • 7.117.0 to < 7.117.25affected
  • 7.125.0 to < 7.125.18affected
  • 7.133.0 to < 7.133.27affected
  • 7.146.0 to < 7.146.34affected
  • 7.161.0 to < 7.161.15affected

References