jfrog News Articles

Three JFrog Artifactory Flaws Exploited for Backdoor Deployment

Threat actors have been chaining three JFrog Artifactory vulnerabilities to gain admin privileges and deploy backdoors.

1 month ago

JFrog Artifactory Hacked in 24-Day Campaign; Rust Backdoors Survive Patching

JFrog Artifactory vulnerabilities CVE-2026-42016, CVE-2026-42018, and CVE-2026-82329 were chained by multiple threat actors to hack build servers and plant Rust backdoors between August 15 and

More JFrog Artifactory bugs under attack, and all 3 have patches

If you're waiting for a sign to upgrade to a fixed version: this is it

More JFrog Artifactory bugs under attack, and all 3 have patches

If you're waiting for a sign to upgrade to a fixed version: this is it

Artifactory flaws chained in attacks deploying backdoor malware

Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted servers.

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors - SwapUpdate

Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers chained two JFrog Artifactory flaws on unupdated servers to gain admin control, while a third flaw was exploited separately.

Attackers Exploit CVE-2026-82329 to Forge JFrog Artifactory Admin Tokens - IT Security News

Cybersecurity researchers have observed attackers exploiting a critical JFrog Artifactory vulnerability shortly after its public disclosure. The flaw allows unauthenticated attackers to obtain administrative...

Hackers exploit critical JFrog Artifactory flaw to forge admin tokens

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access.

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

Exploitation of the JFrog Artifactory authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure.

Attackers Jump on Critical Artifactory Flaw After Disclosure

CVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin level access on affected systems.

JFrog Artifactory Flaw Opens Door to Supply Chain Takeovers as Attackers Mint Admin Tokens

Attackers are exploiting CVE-2026-82329 in JFrog Artifactory to mint admin tokens days after its August 28 patch release. The authentication bypass grants full control over artifact repositories under default settings. Self-hosted users must update immediately to versions like 7.161.20 while reviewi...

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure - SwapUpdate

Ravie LakshmananSep 01, 2026Vulnerability / Supply Chain Attack

Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Attackers exploit a JFrog Artifactory authentication bypass to mint admin tokens and enumerate users on default configurations.

JFrog Artifactory Auth Bypass Exploited in Attacks to Gain Admin Access

A critical authentication bypass vulnerability in JFrog Artifactory, tracked as CVE-2026-82329, is being actively exploited, allowing unauthenticated attackers with network access to gain administrator-level privileges. WatchTowr said its intelligence team has observed attackers exploiting the issue...

Vanna AI Vulnerability: Remote Code Execution (CVE-2024-5565)

The Vanna AI vulnerability exposes SQL databases to remote code execution (RCE) via prompt injection.

Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

Discover how a critical flaw in Vanna.AI library exposes databases to remote code execution and the growing risks of AI prompt injection attacks.