Access Control Issues in JFrog Artifactory by JFrog
CVE-2026-68758

6.5MEDIUM

Key Information:

Vendor

Jfrog

Status
Artifactory
Vendor
CVE Published:
12 August 2026

What is CVE-2026-68758?

A vulnerability has been discovered in JFrog Artifactory where low-privileged authenticated users are able to access sensitive support information under certain conditions. This issue poses potential risks to data confidentiality and could lead to unauthorized exposure of sensitive materials. It is crucial for organizations using affected versions to review their user permission settings to mitigate this risk.

Affected Version(s)

artifactory 0 < 7.146.35

artifactory 7.161.0 < 7.161.16

References

https://docs.jfrog.com/releases/docs/jfrog-security-advis...
vendor-advisory
https://docs.jfrog.com/releases/docs/artifactory-self-man...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Khai Tran | OpenAI
.