EUVD-2026-57242
GHSA-jh2f-hwv7-p5g3
Severity by source
AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Description states unauthenticated access, so PR:N overrides the provided PR:L; AC:H retained for the specific non-default credentialed remote repository configuration required to trigger the flaw.
Primary rating from Vendor (JFROG).
CVSS VectorVendor: JFROG
Lifecycle Timeline
3DescriptionCVE.org
An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.
AnalysisAI
Unauthorized read access to restricted JFrog Artifactory content is possible when a credentialed remote repository is configured in a specific non-default manner, triggering a missing authorization check (CWE-862). The flaw affects all Artifactory versions per the CPE wildcard, exposing proprietary artifacts such as internal libraries, Docker images, or build dependencies to network-accessible requests without credential validation. No public exploit has been identified at time of analysis and no CISA KEV listing exists, but the high confidentiality impact (C:H in CVSS) means successful exploitation results in full read exposure of the targeted restricted repository.
Technical ContextAI
JFrog Artifactory is an enterprise binary repository manager central to DevOps artifact lifecycle management, supporting formats including Maven, npm, Docker, PyPI, and others. Remote repositories in Artifactory function as proxies to upstream registries and can store credentials for accessing authenticated external sources. The root cause is CWE-862 (Missing Authorization): Artifactory fails to enforce an authorization check at a code path triggered when a remote repository is configured with stored upstream credentials in a specific way, allowing unauthenticated network requests to retrieve content that should be access-controlled. The CPE string cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:*:*:* covers all versions of the Artifactory application across editions, though no bounding version range is disclosed in available data. The vulnerability is reported by JFrog themselves as the originating vendor.
RemediationAI
Consult the JFrog security advisory at https://docs.jfrog.com/releases/docs/jfrog-security-advisories for the vendor-confirmed fixed version, as no exact patch version number was included in the available data - do not assume a fix version. For self-managed deployments, upgrade guidance is available at https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases. As a compensating control prior to patching, administrators should audit all remote repository configurations to identify those with stored upstream credentials and assess whether they match the triggering configuration pattern; temporarily removing stored credentials from affected remote repositories eliminates the attack surface but will break proxying of authenticated upstream registries, requiring downstream pipeline adjustments. Additionally, restricting network-level access to the Artifactory instance to trusted internal CIDR ranges via firewall or reverse proxy rules reduces exposure for internet-facing deployments. Enable Artifactory's access log and audit trail to detect anomalous unauthenticated access patterns to restricted repository paths while patching is underway.
More in Artifactory
View allAuthentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi
Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage
JFrog Artifactory exposes an internal anonymous-user token to unauthenticated callers even when anonymous access is expl
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten
An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that
Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository
Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser
Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today