Search
Find merged stories by title or summary.
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. "JFrog Artifactory contains an authentication weakness that, under default
JFrog security advisory (AV26-867)
Serial number: AV26-867 Date: September 1, 2026 As of August 28, 2026, JFrog is affected by a vulnerability in the following product: • Artifactory • Prior to 7.111.21 • Prior to 7.117.28 • Prior to 7.125.20 • Prior to 7.133.29 • Prior to 7.146.38 • Prior to 7.161.20 Open-source reporting indicates that CVE-2026-82329 related to JFrog Artifactory is being exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. • Artifactory Self-Managed Releases • JFrog Security Advisories JFrog security advisory (AV26-867) - Canadian Centre for Cyber Security
JFrog Artifactory Auth Bypass Exploited in Attacks to Gain Admin Access
A critical authentication bypass vulnerability in JFrog Artifactory , tracked as CVE-2026-82329, is being actively exploited, allowing unauthenticated attackers with network access to gain administrator-level privileges. WatchTowr said its intelligence team has observed attackers exploiting the issue and “minting themselves admin tokens.” An attacker with a valid administrator token could control the affected Artifactory environment, including repositories, user accounts, access permissions, build artifacts, and software packages stored in the platform. JFrog disclosed the vulnerability on August 28, 2026, and classified it as critical. The company described CVE-2026-82329 as an improper authentication issue, tracked under CWE-287. Under the default configuration, a remote attacker does not need valid credentials to exploit the weakness and may obtain administrative privileges.
Critical JFrog Artifactory Authentication Bypass Exploited in the Wild
A newly disclosed active exploitation of a JFrog Artifactory authentication bypass warns that attackers are minting administrator tokens on vulnerable internet-accessible instances. Tracked as CVE-2026-82329, the flaw can enable unauthenticated network attackers to obtain administrative privileges when Artifactory runs with its default configuration. The vulnerability carries a CVSS v3. 1 score of 9. 8 and is classified as critical. Its vector, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicates that exploitation is remotely reachable, requires low complexity, requires no existing account, and requires no user interaction. Critical JFrog Artifactory Authentication Bypass Exploited Artifactory is a repository manager for software packages, container images, binaries, and build artifacts.
Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild
Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild appeared first on SecurityWeek .
You've reached the end of current stories for this search.