Advisoriesby IbisJFrogCVE-2026-66014
JFrog artifactory: privilege escalation
Fix: upgrade to 7.111.18 or later (4 fixed versions below)
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| artifactory Product | < 7.111.18 | 7.111.18 |
| >= 7.117.0, < 7.117.25 | 7.117.25 | |
| >= 7.125.0, < 7.125.18 | 7.125.18 | |
| >= 7.133.0, < 7.133.27 | 7.133.27 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-287