CVE-2026-66014

JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.

Score

CVSS 3.1 8.8 High

Status

Analyzed - reefs@jfrog.com

Published

2026-07-27

Last modified

2026-10-24

Weaknesses

CWE-287

Affected products

• Artifactory (Jfrog)

References

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases