JFrog Artifactory Authentication Bypass: Critical Vulnerability Exploited
- Severity
- HIGH
- Affected component
- jfrog artifactory (npm)
- Patched version
- Not yet available
A critical improper authentication vulnerability (CVE-2026-82329) in JFrog Artifactory is being actively exploited. This flaw allows unauthenticated attackers to gain administrative privileges under default configuration.
What happened
Researchers have observed attackers exploiting CVE-2026-82329 to forge admin tokens in JFrog Artifactory. The vulnerability is present in the default configuration of self-managed instances, enabling unauthenticated attackers with network access to obtain administrative permissions. JFrog has not yet published an authoritative version range for affected components, so all users of JFrog Artifactory should assume they are at risk and take immediate action.
The exploitation of this vulnerability was first flagged on September 2, 2026, and has since been confirmed by multiple independent sources. The Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-82329 to its Known Exploited Vulnerabilities Catalog, indicating that this is an active threat.
What to do about it
- Upgrade to the latest version of JFrog Artifactory as soon as possible.
- Review and strengthen administrative access controls within JFrog Artifactory.
- Monitor network traffic for any suspicious activity related to JFrog Artifactory.
- Consult the primary sources for the most current information and recommendations.
- No official fix has been published yet. Monitor the sources below for updates.
How 0Day would have caught this
jfrog artifactory is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
If you are using JFrog Artifactory, you should assume you are affected until an authoritative version range is published. Upgrade to the latest version immediately.
What should I do right now?
Upgrade to the latest version of JFrog Artifactory and review your administrative access controls. Monitor network traffic for suspicious activity.
Has this been exploited in the wild?
Yes, CVE-2026-82329 is being actively exploited by attackers to gain administrative privileges in JFrog Artifactory.