CVE-2026-42016

HIGH NVD

CVSS Score 8.1

Severity HIGH

Published Jul 27, 2026

Vendor unknown

Description

JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope.

References

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
https://docs.jfrog.com/releases/docs/jfrog-security-advisories