CVE-2026-70551

Description

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL.

References

• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories