CVE-2026-42016

Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation

high · 8.1

Known exploited

Fix listed

Artifactory

Published Jul 27, 2026, 19:20 UTC

Description

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

Reported fixed versions

7.133.11

Official CVE record Read Eden case study View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.