EUVD-2026-57389
GHSA-p589-cm2m-mwpc
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The description's 'specific conditions' qualifier contradicts vendor AC:L, independently assessed as AC:H; PR:L confirmed by low-privileged user prerequisite.
Primary rating from Vendor (JFROG).
CVSS VectorVendor: JFROG
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.
AnalysisAI
Cache metadata poisoning in JFrog Artifactory enables a low-privileged authenticated user to corrupt cached artifact metadata entries, causing downstream consumers - including CI/CD pipelines and development toolchains - to silently retrieve untrusted or attacker-influenced content. All versions of Artifactory are listed as affected per the CPE wildcard, making this a broad supply chain integrity concern for organizations relying on Artifactory as a central repository manager. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid low-privileged account on the targeted Artifactory instance, as confirmed by the PR:L metric in the CVSS vector - unauthenticated exploitation is not indicated. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The vendor-assigned CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) yields a score of 8.8 and presents this as low-complexity, network-accessible exploitation requiring only a low-privileged account. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with a low-privileged Artifactory account submits crafted artifact metadata over the network that exploits the insufficient input validation to overwrite or inject entries into the shared metadata cache. Subsequently, other users, automated build agents, or release pipelines request artifact resolution, receive the poisoned metadata, and are directed to retrieve untrusted or attacker-controlled content - potentially introducing malicious binaries into build outputs or production deployments without any anomalous authentication event. |
| Remediation | The primary remediation is to upgrade JFrog Artifactory to the patched version identified in JFrog's official advisory at https://docs.jfrog.com/releases/docs/jfrog-security-advisories and the self-managed release notes at https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases - the exact fixed version must be retrieved from those sources, as it is not independently confirmed in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and inventory all Artifactory instances across your environment and assess which actively serve artifacts to CI/CD pipelines and development workflows; simultaneously audit existing users to identify all low-privileged accounts and their access scope. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Artifactory
View allAn issue was discovered in JFrog Artifactory 6.7.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely e
Low-privileged users can exploit a deserialization flaw in JFrog Artifactory's package handling to potentially execute a
In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modif
JFrog Artifactory version since 5.11 contains a Cross ite Request Forgery (CSRF) vulnerability in UI rest endpoints that
Server-side request forgery in JFrog Artifactory Ansible repository handling allows authenticated users with repository
Information disclosure in JFrog Artifactory allows authenticated users with read access to an ordinary repository to ret
JFrog Artifactory before 4.11 allows remote attackers to execute arbitrary code via an LDAP attribute with a crafted ser
Privilege escalation in JFrog Artifactory stems from an authentication handling weakness in how the platform processes i
Authenticated low-privilege users of JFrog Artifactory can write arbitrary files outside the intended build artifacts lo
Exposure of privileged authorization material in JFrog Artifactory allows an authenticated low-privileged user to obtain
Privilege escalation in JFrog Artifactory Self-Hosted before 7.133.11 lets a low-privileged authenticated user leverage
Privilege escalation in JFrog Artifactory allows low-privileged authenticated users to forge administrator JWTs by explo
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today