CVE-2026-68754

Awaiting Analysis Awaiting Analysis - Queue

Repository Publisher Modifies Protected Package Content

Publication date: 2026-08-12

Last updated on: 2026-08-28

Assigner: JFrog

Description

A repository publisher without delete permission may modify protected package content under specific conditions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-28

Generated

2026-09-02

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-31

NVD

CVE-2026-68754

EUVD

EUVD-2026-57243

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

A vulnerability exists where a repository publisher without delete permissions can modify protected package content under specific conditions. This occurs due to insufficient access controls, allowing unauthorized changes to sensitive data.

Impact Analysis

This vulnerability could lead to unauthorized modifications of protected packages, potentially causing data corruption, integrity issues, or exposure of sensitive information. Users relying on these packages may experience disruptions or security risks.

Compliance Impact

This vulnerability allows unauthorized modification of protected package content by a repository publisher without delete permissions. This could lead to tampering with software dependencies or configurations, potentially violating integrity requirements in standards like GDPR (data integrity) and HIPAA (system integrity).

Mitigation Strategies

Review repository permissions to ensure publishers without delete rights cannot modify protected packages. Monitor package integrity and restrict unauthorized changes to critical content.

Hi! I’m here to help you understand CVE-2026-68754. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70