Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2026-82329

Potential authentication bypass leading to administrative access in Artifactory

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jfrog artifactory

Default version status: unaffected

  • 0 to < 7.111.21affected
  • 7.117.0 to < 7.117.28affected
  • 7.125.0 to < 7.125.20affected
  • 7.133.0 to < 7.133.29affected
  • 7.146.0 to < 7.146.38affected
  • 7.161.0 to < 7.161.20affected

References