CVE-2026-66375

Description

A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.

References

• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories