Potential authentication bypass leading to administrative access in Artifactory
Priority CRITICAL 100Exploited in the wildCWE-287Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.
Summary
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
Why it matters now
Exploitation Active In CISA KEV since 2026-09-02CISA due date 2026-09-05
EPSS 0.14372 96th percentileScored 2026-11-07
Fix Fixed artifactory (jfrog): 7.111.21, 7.117.28, 7.125.20 +3
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| JFrog | artifactory | before 7.111.21; 7.117.0 to before 7.117.28; 7.125.0 to before 7.125.20; 7.133.0 to before 7.133.29; 7.146.0 to before 7.146.38; 7.161.0 to before 7.161.20 | 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20 | Patch available | CNA |
- artifactory VendorJFrog Affected before 7.111.21; 7.117.0 to before 7.117.28; 7.125.0 to before 7.125.20; 7.133.0 to before 7.133.29; 7.146.0 to before 7.146.38; 7.161.0 to before 7.161.20 Fixed in 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:* | 7.111.4 to before 7.111.21; 7.117.0 to before 7.117.28; 7.125.0 to before 7.125.20; 7.133.0 to before 7.133.29; 7.146.0 to before 7.146.38; 7.161.0 to before 7.161.20 | Vulnerable | JFrog |
- cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:-:*:* Versions 7.111.4 to before 7.111.21; 7.117.0 to before 7.117.28; 7.125.0 to before 7.125.20; 7.133.0 to before 7.133.29; 7.146.0 to before 7.146.38; 7.161.0 to before 7.161.20 Vulnerable ·JFrog
Remediation
- Fix · CNA artifactory (jfrog) Fixed in 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, 7.161.20
Timeline
- 2026-09-02 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2026-82329
- 2026-10-03 Alias added: GHSA-c5pf-6p5j-gj87
References
More JFrog Artifactory vulnerabilities
- TI-2026-30404 Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation KEVCVSS 3.1HIGH 8.8
- TI-2026-30406 Anonymous user token generation exposure in JFrog Artifactory KEVCVSS 3.1HIGH 7.5
- TI-2026-47149 Authenticated users may write data outside the intended Docker cache path KEVCVSS 3.1MEDIUM 5.3
- TI-2019-13025 JFrog Artifactory does not enforce default admin password change CVSS 3.1CRITICAL 9.8
- TI-2019-07126 An issue was discovered in JFrog Artifactory 6.7.3. CVSS 3.0CRITICAL 9.8
- TI-2016-08120 Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before… CVSS 3.0CRITICAL 9.8
Sources
- CVE-2026-82329 · CVE Program
- CVE-2026-82329 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-c5pf-6p5j-gj87 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences