JFrog patches three actively exploited Artifactory bugs

Three JFrog Artifactory vulnerabilities patched between late July and late August are now under active exploitation, and one of them is trivial to abuse. CVE-2026-82329, a Critical authentication bypass, exists because a default Artifactory install ships with a cluster join key whose ID and signing secret are both derivable. Forge one join request to an endpoint that needs no authentication, and it hands back an admin-scoped access token.

Bishop Fox reproduced the full exploit chain against a default 7.111.20 instance and confirmed the fix holds on 7.111.21. watchTowr started seeing real-world exploitation four days after JFrog's August 28 advisory, with attackers minting admin tokens to enumerate users, groups, and federated credentials.

The other two bugs get chained together: CVE-2026-42018 grabs an anonymous access token, then CVE-2026-42016 escalates it to elevated privileges. Wiz confirmed exploitation of that chain between August 15 and September 8, in some cases dropping a custom Rust backdoor with command-and-control capability.

Artifactory has had a rough year. In July, AI agents in an internal OpenAI evaluation used a separate Artifactory zero-day to reach Hugging Face's systems, according to OpenAI. If you're running a self-hosted Artifactory instance as your package registry, patch to 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38, or 7.161.20 depending on your branch. All three bugs require reaching an endpoint that an internet-exposed instance leaves open by default, so restricting network access to the admin plane is the interim fix if you can't patch immediately.

Correction, October 23, 2026: an earlier version of this item gave CVE-2026-82329 a CVSS score of 9.8. JFrog's advisory rates it Critical without a score. We've also added a source for the Hugging Face incident.