Advisoriesby IbisJFrogCVE-2026-82329
JFrog artifactory: improper authentication
Fix: upgrade to 7.111.21 or later (4 fixed versions below)
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| artifactory Product | < 7.111.21 | 7.111.21 |
| >= 7.117.0, < 7.117.28 | 7.117.28 | |
| >= 7.125.0, < 7.125.20 | 7.125.20 | |
| >= 7.133.0, < 7.133.29 | 7.133.29 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-287