EUVD-2026-57319
GHSA-fwvx-mgc3-hfxw
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-reachable unauthenticated bypass with high complexity due to specific triggering conditions; only confidentiality is impacted as artifacts are read-only exposed.
Primary rating from Vendor (JFROG).
CVSS VectorVendor: JFROG
Lifecycle Timeline
3DescriptionCVE.org
An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.
AnalysisAI
Unauthorized artifact access in JFrog Artifactory allows unauthenticated network attackers to retrieve restricted artifacts under specific, high-complexity conditions. The flaw stems from a missing authorization check (CWE-862) that can be triggered without credentials, directly exposing confidential build artifacts, proprietary binaries, or sensitive packages stored in the repository. No public exploit code or active exploitation has been identified at time of analysis, and the high attack complexity requirement (AC:H) limits opportunistic mass exploitation.
Technical ContextAI
JFrog Artifactory is a universal binary repository manager widely deployed in enterprise DevOps pipelines to store build artifacts, Docker images, Helm charts, Maven packages, and other binary assets. The vulnerability is classified as CWE-862 (Missing Authorization), indicating that the application fails to perform an authorization check at one or more code paths, allowing an unauthenticated requester to satisfy a request that should require a valid, authorized session. The CPE string cpe:2.3:a:jfrog:artifactory:*:*:*:*:*:*:*:* covers all versions of Artifactory across all editions (OSS, Pro, Enterprise), though the specific version range is not bounded in available data. The 'specific conditions' language in the description, consistent with CVSS AC:H, suggests the bypass is not universally triggerable - it likely depends on a non-default configuration state, a specific request sequence, a race condition, or a particular repository permission layout.
RemediationAI
Consult the JFrog security advisory at https://docs.jfrog.com/releases/docs/jfrog-security-advisories and the Artifactory self-managed release notes at https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases to identify the specific patched version - no exact fix version was included in the available intelligence data and none can be independently confirmed at this time. Organizations running self-managed Artifactory instances should prioritize upgrading to the latest available release as indicated in the vendor advisory. As an interim compensating control, restrict network access to Artifactory instances to known, trusted IP ranges using perimeter firewall rules or reverse proxy ACLs, reducing the attacker pool able to meet the AC:H conditions; this has the trade-off of impacting remote developer and CI/CD pipeline access. Additionally, auditing repository-level permission configurations to ensure restricted repositories are not inadvertently accessible via anonymous access settings can limit exposure. JFrog Cloud customers should verify with JFrog support whether the SaaS platform has already received a remediation deployment.
More in Artifactory
View allAuthentication bypass in JFrog Artifactory allows an unauthenticated, network-adjacent attacker to escalate to full admi
Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage
JFrog Artifactory exposes an internal anonymous-user token to unauthenticated callers even when anonymous access is expl
Path traversal in JFrog Artifactory (CWE-22) enables an authenticated low-privilege user to write data outside the inten
An issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that
Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository
Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser
Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today