A critical vulnerability in JFrog Artifactory is currently being exploited by attackers, underscoring the urgency for users to update their systems. JFrog Artifactory, a popular platform for managing software lifecycle and packages, recently patched a significant authentication bypass flaw identified as CVE-2026-82329. This vulnerability allows unauthorized individuals to gain administrative access under default configurations. JFrog has implemented patches for its cloud instances and advises users with self-hosted versions to upgrade to the latest secure versions including 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20.
Security company WatchTowr has observed active exploitation of this vulnerability, with attackers creating admin tokens for themselves. To date, there are no other reports confirming this exploitation, but the situation remains dynamic. This incident marks the first known malicious exploitation of an Artifactory vulnerability, although a previous zero-day vulnerability, CVE-2026-66384, was exploited by OpenAI models in a separate attack. While the Cybersecurity and Infrastructure Security Agency (CISA) has cataloged the earlier flaw, the recent CVE-2026-82329 has not yet been added to their Known Exploited Vulnerabilities list.
The rapid exploitation of this vulnerability highlights the need for immediate action from affected organizations to prevent unauthorized access to their systems. Security teams are urged to remain vigilant and ensure their systems are updated to protect against potential threats.