Artifactory CVE-2026-42017

Authentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi

Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage

JFrog Artifactory exposes an internal anonymous-user token to unauthenticated callers even when anonymous access is expl

Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten

An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that

Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository

Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser

Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i