CVE-2026-66015

Analyzed Analyzed - Analysis Complete

Authenticated Privilege Escalation in JFrog Platform

Publication date: 2026-07-27

Last updated on: 2026-07-30

Assigner: JFrog

Description

An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-27

Last Modified

2026-07-30

Generated

2026-08-17

AI Q&A

2026-07-27

EPSS Evaluated

2026-08-15

NVD

CVE-2026-66015

EUVD

EUVD-2026-49575

Affected Vendors & Products

Vendor	Product	Version / Range
jfrog	artifactory	From 7.161.0 (inc) to 7.161.15 (exc)
jfrog	artifactory	From 7.146.0 (inc) to 7.146.34 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is an authenticated privilege-escalation vulnerability in JFrog Platform that may allow an attacker with admin-provisioned account access to temporarily gain platform administrator privileges.

Impact Analysis

An attacker could exploit this to gain elevated access, potentially allowing unauthorized control over the JFrog Platform, data manipulation, or system compromise.

Compliance Impact

This vulnerability allows temporary platform administrator access under specific conditions, which could lead to unauthorized data access, modification, or deletion. Such breaches may violate GDPR's data protection requirements and HIPAA's safeguards for protected health information, potentially resulting in non-compliance and legal penalties.

Mitigation Strategies

Immediately review and restrict admin-provisioned accounts to prevent unauthorized privilege escalation. Monitor system logs for unusual admin access or privilege changes. Apply patches or updates from JFrog as soon as they become available.

Hi! I’m here to help you understand CVE-2026-66015. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70