Exposed Internal Token Vulnerability in JFrog Artifactory by JFrog

CVE-2026-42018

What is CVE-2026-42018?

JFrog Artifactory features a vulnerability that allows for the unintended return of an internal anonymous-user token to an unauthenticated user, even when anonymous access is meant to be disabled. This flaw could potentially lead to unauthorized access to sensitive resources, putting organizations at risk. It's crucial for users of JFrog Artifactory to remain vigilant and apply necessary updates and security measures to mitigate risks associated with this vulnerability.

References