CVE-2026-69107 PUBLISHED

Potential unauthorized artifact access in JFrog Artifactory

Assigner: JFROG
Reserved: 03.08.2026 Published: 12.08.2026 Updated: 12.08.2026

An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 5.9

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS 3.1

Vendor	jfrog
Product	artifactory
Versions	Default: unaffected affected from 0 to 7.104.16 (excl.) affected from 7.111.0 to 7.111.14 (excl.) affected from 7.117.0 to 7.117.21 (excl.) affected from 7.125.0 to 7.125.14 (excl.) affected from 7.133.0 to 7.133.21 (excl.) affected from 7.146.0 to 7.146.8 (excl.)