An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is not affected.

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities:

  - A deserialization weakness in JFrog Artifactory package handling could allow a     low-privileged user to impact confidentiality, integrity, and availability under     specific repository conditions. (CVE-2026-65617)

  - A path validation weakness in archive extraction/write handling allows entries     with traversal sequences to be written outside the intended build artifacts     location. (CVE-2026-65921)

  - JFrog Artifactory contains an authentication handling weakness in internal     request processing that, under specific conditions, may allow an attacker to     escalate privileges beyond the intended access level. (CVE-2026-66014)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is affected by multiple vulnerabilities:

  - A deserialization weakness in JFrog Artifactory package handling could allow a     low-privileged user to impact confidentiality, integrity, and availability under     specific repository conditions. (CVE-2026-65617)

  - A path validation weakness in archive extraction/write handling allows entries     with traversal sequences to be written outside the intended build artifacts     location. (CVE-2026-65921)

  - JFrog Artifactory contains an authentication handling weakness in internal     request processing that, under specific conditions, may allow an attacker to     escalate privileges beyond the intended access level. (CVE-2026-66014)

  - An authenticated privilege-escalation vulnerability in JFrog Platform may be     exploited under admin-provisioned account conditions. Successful exploitation     may grant temporary platform administrator access. (CVE-2026-66015)

  - Build readers can access another repository's environment properties. A caller     with read access to an ordinary repository can select a readable repository     parameter while retrieving environment properties for a protected build,     exposing build environment secrets. (CVE-2026-66018)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
367886	JFrog Artifactory 7.133.x < 7.133.27 Multiple Vulnerabilities	Nessus	Misc.	Local	high
367885	JFrog Artifactory 7.117.x < 7.117.25 Multiple Vulnerabilities	Nessus	Misc.	Local	high
367882	JFrog Artifactory 7.125.x < 7.125.18 Multiple Vulnerabilities	Nessus	Misc.	Local	high
367881	JFrog Artifactory < 7.111.18 Multiple Vulnerabilities	Nessus	Misc.	Local	high
331352	JFrog Artifactory 7.161.x < 7.161.15 Multiple Vulnerabilities	Nessus	Misc.	Local	high
331351	JFrog Artifactory 7.146.x < 7.146.34 Multiple Vulnerabilities	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-65922

medium

Tenable Plugins

high

high

high

high

high

high