CVE-2026-66375
Received Received - Intake

Authenticated User Metadata Deletion in JFrog Artifactory

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: JFrog

Description
A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-08-12
AI Q&A
2026-08-12
EPSS Evaluated
N/A
NVD
CVE-2026-66375
EUVD
EUVD-2026-57254

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows a low-privilege authenticated user to permanently delete protected internal metadata across repositories under specific conditions. The impact includes unauthorized data removal that could disrupt repository integrity and functionality.

Impact Analysis

If exploited, this vulnerability could lead to loss of critical metadata, affecting repository operations, data integrity, and availability. Users may experience system disruptions or data corruption due to unauthorized deletions.

Compliance Impact

This vulnerability could violate compliance requirements by compromising data integrity and availability, potentially leading to unauthorized data loss. Organizations may face penalties for failing to protect sensitive metadata under regulations like GDPR or HIPAA.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66375. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart