Cve 2026 82329 - GoKawiil

JFrog Artifactory bug lets attackers forge admin tokens in active exploits

A critical authentication bypass, CVE-2026-82329, in self-managed JFrog Artifactory deployments is being actively exploited to mint fraudulent administrator tokens without any prior authentication. The flaw sits in Artifactory's default configuration, and watchTowr researchers say attackers are already using it in the wild. JFrog patched the issue on August 28 across several version branches, and confirmed its cloud-hosted environments were never at risk.

bleepingcomputer.com · 2026-09-02

Hackers exploit critical JFrog Artifactory authentication bypass bug

A critical vulnerability tracked as CVE-2026-82329 in JFrog's Artifactory repository manager allows attackers to bypass authentication and gain administrator-level access to affected systems. Security researchers report that exploitation attempts began soon after the flaw's public disclosure, putting unpatched deployments at immediate risk.

darkreading.com · 2026-09-01