AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

JFrogCVE-2026-69104

JFrog artifactory: information disclosure

JFrog

CVE-2026-69104 · Published Aug 25, 2026 · updated Aug 28, 2026

High7.6
Fix: upgrade to 7.161.19 or later
JFrog advisory

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

Affected versions

PackageAffectedFixed in
artifactory
Product
>= 7.161.0, < 7.161.197.161.19
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-862

More JFrog advisories

All JFrog
Critical 9.8Aug 28JFrog artifactory: improper authenticationCVE-2026-82329fixed in 7.111.21 +3Low 3.5Aug 25JFrog artifactory: server-side request forgeryCVE-2026-70548fixed in 7.161.19 +1Medium 6.5Aug 25JFrog artifactory: missing authorizationCVE-2026-70550fixed in 7.161.19 +1High 8.5Aug 25JFrog artifactory: server-side request forgeryCVE-2026-70551fixed in 7.161.19 +1High 8.8Aug 12JFrog artifactory: improper input validationCVE-2026-69106fixed in 7.146.28High 7.5Aug 12JFrog artifactory: improper authenticationCVE-2026-42018fixed in 7.111.20 +3