CVE-2026-82329

Analyzed Analyzed - Analysis Complete

Authentication Bypass in JFrog Artifactory

Publication date: 2026-08-28

Last updated on: 2026-09-03

Assigner: JFrog

Description

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-09-03

Generated

2026-09-18

AI Q&A

2026-08-29

EPSS Evaluated

2026-09-15

NVD

CVE-2026-82329

EUVD

EUVD-2026-67861

Affected Vendors & Products

Vendor	Product	Version / Range
jfrog	artifactory	From 7.111.4 (inc) to 7.111.21 (exc)
jfrog	artifactory	From 7.117.0 (inc) to 7.117.28 (exc)
jfrog	artifactory	From 7.125.0 (inc) to 7.125.20 (exc)
jfrog	artifactory	From 7.133.0 (inc) to 7.133.29 (exc)
jfrog	artifactory	From 7.146.0 (inc) to 7.146.38 (exc)
jfrog	artifactory	From 7.161.0 (inc) to 7.161.20 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

JFrog Artifactory has an authentication weakness that, by default, allows an unauthenticated attacker with network access to gain administrative privileges.

Detection Guidance

Check for unauthorized administrative access or unusual activity in JFrog Artifactory logs. Monitor network traffic for unexpected connections to Artifactory ports. Verify if default credentials are still in use or if administrative privileges have been granted without authentication.

Impact Analysis

An attacker could exploit this to take full control of the Artifactory instance, access sensitive data, modify repositories, or disrupt operations. This could lead to data breaches, unauthorized software distribution, or service disruption.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update JFrog Artifactory to the latest patched version immediately. Disable default or weak credentials. Restrict network access to Artifactory using firewalls. Review and audit all administrative accounts for unauthorized access.

Hi! I’m here to help you understand CVE-2026-82329. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70