Artifactory CVE-2026-65923

Authentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi

Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage

JFrog Artifactory exposes an internal anonymous-user token to unauthenticated callers even when anonymous access is expl

Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten

An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e

Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a

In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif

JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that

Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret

JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser

Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts lo

Cache metadata poisoning in JFrog Artifactory enables a low-privileged authenticated user to corrupt cached artifact met