CVE-2026-82329

JFrog Artifactory's default configuration allows unauthenticated attackers to gain administrative privileges via an improper authentication flaw.

Under default settings, JFrog Artifactory permits unauthenticated network access to escalate to administrative privileges, exposing sensitive build artifacts and CI/CD pipelines to compromise. DIB organizations must verify their Artifactory deployments are hardened beyond defaults and monitor for exploitation attempts, as this flaw directly undermines access controls and could lead to supply-chain sabotage or data exfiltration.

Shame score — A default-configuration flaw granting administrative access is highly avoidable and represents a severe negligence in securing a widely deployed CI/CD artifact repository.