CVE-2026-69104
Received Received - Intake

Authenticated Repository Migration Permission Bypass in Artifactory

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: JFrog

Description
An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-25
Last Modified
2026-08-25
Generated
2026-08-25
AI Q&A
2026-08-25
EPSS Evaluated
N/A
NVD
CVE-2026-69104
EUVD
EUVD-2026-65521

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
jfrog artifactory 7.161.15

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows an authenticated user to start repository migration operations without proper permissions. This could lead to unauthorized access to data, changes to system state, or service interruptions. The issue is fixed in newer versions.

Detection Guidance

Detect this vulnerability by checking for unauthorized repository migration operations in logs. Look for migration initiation attempts by non-privileged users or unusual state changes in repositories. Review Artifactory access logs for migration-related API calls or commands.

Impact Analysis

An attacker could exploit this to view sensitive information, alter system settings, or disrupt services. Since it requires authentication, the risk depends on user access levels within the system.

Compliance Impact

This vulnerability could lead to unauthorized data exposure or modification, violating GDPR's data protection principles or HIPAA's security rules. Compliance may be compromised if sensitive data is accessed or altered without permission.

Mitigation Strategies

Upgrade to the fixed version of JFrog Artifactory immediately. Ensure all users follow least-privilege principles and review repository permissions. Monitor for suspicious migration activities and restrict migration operations to authorized personnel only.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69104. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart