Critical JFrog Artifactory Authentication Bypass Exploited in the Wild
Brief
A newly disclosed active exploitation of a JFrog Artifactory authentication bypass warns that attackers are minting administrator tokens on vulnerable internet-accessible instances.
Tracked as CVE-2026-82329, the flaw can enable unauthenticated network attackers to obtain administrative privileges when Artifactory runs with its default configuration. The vulnerability carries a CVSS v3. 1 score of 9. 8 and is classified as critical.
Its vector, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicates that exploitation is remotely reachable, requires low complexity, requires no existing account, and requires no user interaction.
Critical JFrog Artifactory Authentication Bypass Exploited
Artifactory is a repository manager for software packages, container images, binaries, and build artifacts.