Jfrog: >> Artifactory >> 7.146.0 Security Vulnerabilities
An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access.
CVSS Score
7.2
EPSS Score
0.006
Published
2026-07-27
Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.
CVSS Score
8.8
EPSS Score
0.002
Published
2026-07-27
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions.
CVSS Score
8.8
EPSS Score
0.007
Published
2026-07-27
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.
CVSS Score
8.8
EPSS Score
0.003
Published
2026-07-27
Page 4