EUVD-2026-57240
GHSA-5hcg-vq85-36gr
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
PR:H confirmed by requirement for Project Resource Manager role; AC:L because description implies no additional complexity beyond possessing the role, despite 'specific conditions' wording.
Primary rating from Vendor (JFROG).
CVSS VectorVendor: JFROG
Lifecycle Timeline
3DescriptionCVE.org
A Project Resource Manager may gain broader administrative privileges under specific conditions.
AnalysisAI
Privilege escalation in JFrog Artifactory enables an authenticated Project Resource Manager to acquire broader administrative privileges under unspecified triggering conditions. The flaw, rooted in CWE-269 (Improper Privilege Management), violates role boundary enforcement within Artifactory's access control system, potentially granting full control over repositories, artifacts, and platform configuration. No public exploit code has been identified and the vulnerability is not listed in CISA KEV at the time of analysis, though the CVSS 7.2 High score with full confidentiality, integrity, and availability impact underscores the post-exploitation risk.
Technical ContextAI
JFrog Artifactory is a universal artifact repository manager central to enterprise CI/CD pipelines, managing binaries, build metadata, and access policies. The vulnerability affects the role-based access control (RBAC) subsystem, specifically the 'Project Resource Manager' role, which is scoped to project-level resource administration. CWE-269 (Improper Privilege Management) identifies the root cause as the application's failure to correctly enforce privilege boundaries - the role is granted or can acquire permissions beyond its intended scope under certain conditions. The CPE cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:*:*:* uses a full wildcard, indicating NVD has not yet constrained the affected version range, though this may reflect incomplete vendor data rather than confirmed impact across all historical releases.
RemediationAI
Consult the JFrog security advisory at https://docs.jfrog.com/releases/docs/jfrog-security-advisories and the Artifactory self-managed release notes at https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases to obtain the exact patched version and upgrade instructions; no specific fix version was confirmed in the available intelligence data. As compensating controls prior to patching, administrators should audit all accounts currently assigned the Project Resource Manager role and remove it from any user or service account that does not strictly require it, reducing the population of accounts that could trigger the escalation. Enabling audit logging for administrative actions in Artifactory and alerting on unexpected privilege use by Project Resource Manager accounts will aid in detection. Note that reducing role assignments may disrupt project workflows for affected users, so coordinate changes with project owners.
More in Artifactory
View allAuthentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi
Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage
JFrog Artifactory exposes an internal anonymous-user token to unauthenticated callers even when anonymous access is expl
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten
An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that
Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository
Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser
Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today