/Vulnerability Library

JFrog Artifactory Access Blank Join Key Authentication Bypass

CVE-2026-82329
Verified

Description

JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Severity

Critical

CVSS Score

9.8

Exploit Probability

14%

Published Date

September 1, 2026

Template Author

johnk3r, pruva

CVE-2026-82329.yaml
9.8Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE ID:
cve-2026-82329
CWE ID:
cwe-287

References

https://jfrog.com/help/r/jfrog-release-information/artifactory-security-fixeshttps://www.pruva.dev/reproductions/REPRO-2026-00341

Remediation Steps

Update to the latest version and ensure secure configuration.