JFrog Artifactory Improper Authentication Vulnerability
jfrog — artifactory
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
9.8
1.2%
Vector breakdown
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published
- Aug 28, 2026
- Modified
- Sep 3, 2026
- Added to KEV
- Sep 2, 2026
- Federal patch due
- Sep 5, 2026
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Weakness classification
Affected packages
Proof-of-concept & exploitation references
8 foundWeaponization
Public repositories whose name or description references CVE-2026-82329, found via a live GitHub search at request time. These are community-sourced signals, not a verified working exploit — cross-check each one before relying on it, and treat higher star counts and recent activity as (weak) corroboration, not proof.
- dinosn/cve-2026-82329-jfrog-artifactory★ 12
CVE-2026-82329 JFrog Artifactory unauthenticated auth-bypass: reproducible Docker lab + URL-parameter validator PoC + patch-diff analysis
updated Sep 12, 2026
- ynsmroztas/CVE-2026-82329-JFrog-Artifactory-Auth-Bypass★ 6
CVE-2026-82329 — JFrog Artifactory (self-hosted) Auth Bypass
updated Sep 7, 2026
- tc4dy/CVE-2026-82329-PoC-Exploit★ 4
CVE-2026-82329 – JFrog Artifactory Auth Bypass Toolkit (CVSS 9.8) | Red/Blue Team suite for self-hosted Artifactory 7.x (111-161). 2 tools: Full Exploit (JWTforge, admin token, user create, mass scan, stealth, interactive menu, resistence, WAF bypass etc.), SafeChecker (version detect, audit, JSON report). 🦾 Use Ethically, Stay Legal :V
updated Oct 14, 2026
- 0xTerror/CVE-2026-82329-JFrog-Artifactory-★ 3
CVE-2026-82329 — JFrog Artifactory Auth Bypass
updated Oct 28, 2026
- realalexandergeorgiev/artifactory-CVE-2026-82329-poc.py★ 1
CVE-2026-82329 — JFrog Artifactory unauthenticated authentication bypass ("phantom join key" -> forged service admin token)
updated Sep 3, 2026
- gagaltotal/CVE-2026-82329-poc★ 0
CVE-2026-82329 Poc
updated Sep 4, 2026
- 0xCyp1337/CVE-2026-82329★ 0
CVE‑2026‑82329 is a critical authentication bypass in JFrog Artifactory (CVSS 9.8) allowing unauthenticated attackers to obtain full administrative privileges. Actively exploited in the wild. Affects self‑hosted versions before patches. PoC for authorized testing only.
updated Sep 4, 2026
- HORKimhab/CVE-2026-82329★ 0
CVE-2026-82329 - Draft or TODO
updated Sep 1, 2026
References
Frequently asked questions
What is CVE-2026-82329?
JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.
How severe is CVE-2026-82329?
CVE-2026-82329 has a CVSS base score of 9.8 out of 10 (CVSS 3.1).
Is CVE-2026-82329 actively exploited in the wild?
Yes. CVE-2026-82329 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added Sep 2, 2026, meaning CISA has confirmed evidence of active exploitation.
What is the EPSS score for CVE-2026-82329?
1.2% - meaning FIRST.org's EPSS model estimates a 1.2% probability this vulnerability will be exploited in the wild within 30 days (67% percentile among all scored CVEs).
Is there exploit tooling available for CVE-2026-82329?
Yes - a public Nuclei template referencing CVE-2026-82329 exist in public repositories we checked. We also found 8 public GitHub repositories referencing this CVE.
What type of vulnerability is CVE-2026-82329?
CVE-2026-82329 is classified under CWE-287 (CWE-287 Improper Authentication).
Cross-checked against
Impactr finds and proves whether CVE-2026-82329 — or flaws like it — are actually reachable in your own web apps and APIs, with a reproducible exploit as evidence.