Unrated severityNVD Advisory· Published Jul 27, 2026· Updated Jul 27, 2026
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
CVE-2026-42016
Description
JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.
Affected products
1- Range: <7.133.11
Patches
Vulnerability mechanics
References
2- docs.jfrog.com/releases/docs/artifactory-self-managed-releasesmitrevendor-advisory
- docs.jfrog.com/releases/docs/jfrog-security-advisoriesmitrevendor-advisory
News mentions
0No linked articles in our index yet.