A Critical Flaw in JFrog Artifactory Allows Hackers to Forge Admin Tokens, Potentially Compromising Entire Systems
A recently discovered vulnerability in JFrog Artifactory, a popular repository manager used by software developers and organizations worldwide, is being exploited by hackers to gain administrative access. The critical flaw, identified as CVE-2026-82329, allows an unauthenticated attacker with network access to create tokens that provide full admin privileges, potentially leading to widespread system compromise.
The vulnerability exists in the default configuration of self-managed instances of JFrog Artifactory and can be exploited by hackers to enumerate users, groups, and federated topologies, read artifacts, change security configurations, and even poison existing packages. The fact that this flaw is present in the default configuration of JFrog Artifactory means that many organizations may not even realize they are vulnerable unless they have taken specific measures to harden their Artifactory setup.
The potential impact of this vulnerability extends far beyond just compromising the Artifactory instance itself. Since administrative access to Artifactory can be used to manipulate trusted artifacts, hackers could potentially replace benign code with malicious versions that would execute on downstream systems, leading to a significant compromise of system security and integrity. This is particularly concerning given that many organizations rely on Artifactory to store binaries and packages consumed by build and deployment systems.
Researchers at watchTowr have observed the flaw being exploited in attacks, with attackers minting themselves admin tokens. While details about the exploit are scarce, it’s clear that the vulnerability is serious enough that JFrog has already issued a patch for affected versions of Artifactory (7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, and 7.161.20). The company claims that its cloud environments were already protected.
In light of this vulnerability, it’s essential for organizations using JFrog Artifactory to take immediate action. This includes verifying the version of Artifactory being used and applying any available patches or upgrades. Additionally, organizations should review their security configurations to ensure they are not vulnerable to this exploit and consider implementing additional security measures to mitigate potential risks.
Ultimately, this vulnerability serves as a stark reminder of the importance of maintaining up-to-date software and configurations, particularly for critical systems like Artifactory that have far-reaching implications for system security and integrity. By staying vigilant and taking proactive steps to address vulnerabilities, organizations can help prevent such attacks and protect their sensitive data from potential compromise.
Source: Bleeping Computer — 2026-09-02