CVE-2026-69104

Published: Aug 25, 2026Modified: Aug 28, 2026

7.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Exploitability: 2.8 / Impact: 4.7

Source: reefs@jfrog.com (Secondary)

Description

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

Related CWEs

CWE-862

Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

Source: reefs@jfrog.com

https://docs.jfrog.com/releases/docs/jfrog-security-advisories

Source: reefs@jfrog.com

Timeline

No history available yet.