CVE-2026-42016
Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in JFrog Artifactory Self-Hosted

Publication date: 2026-07-27

Last updated on: 2026-07-27

Assigner: JFrog

Description
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-27
Last Modified
2026-07-27
Generated
2026-07-28
AI Q&A
2026-07-27
EPSS Evaluated
N/A
NVD
CVE-2026-42016
EUVD
EUVD-2026-49566

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jfrog artifactory to 7.133.11 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

JFrog Artifactory versions before 7.133.11 have a privilege escalation vulnerability. The issue occurs because the system checks the token signature and issuer but fails to validate the token's scope. This allows attackers with limited access to potentially escalate their privileges.

Impact Analysis

An attacker could exploit this to gain higher-level access in your Artifactory instance. This might allow them to read sensitive data, modify configurations, or perform unauthorized actions. The impact depends on your Artifactory setup and user permissions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements like GDPR or HIPAA. It may result in data breaches, unauthorized modifications, or loss of audit trails, potentially leading to legal penalties or reputational damage.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-42016. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart