JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges.

Researchers have observed exploitation of multiple JFrog Artifactory flaws as recently as September 8. Apply the available patches ASAP.

This critical authentication bypass vulnerability affecting JFrog Artifactory has been reportedly exploited in the wild. Immediate patching is recommended.

Self-hosted JFrog Artifactory versions 7.111.4 prior to 7.111.21, 7.117.x prior to 7.117.28, 7.125.x prior to 7.125.20, 7.133.x prior to 7.133.29, 7.146.x prior to 7.146.38 and 7.161.x prior to 7.161.20 suffer from an authentication bypass vulnerability. The JFrog Access service trusts a blank join key on a default installation, and the HMAC secret derived from that blank key is a known value. A remote and unauthenticated attacker can therefore forge a cluster join token, submit it to the unauthenticated cluster join endpoint and be granted an access token scoped to `admin`, which can be exchanged for a platform administrator token to read the server configuration, enumerate all the platform tokens or tamper with the hosted artifacts.

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is 7.111.4 prior to 7.111.21, 7.117.x prior to 7.117.28, 7.125.x prior to 7.125.20, 7.133.x prior to 7.133.29, 7.146.x prior to 7.146.38, or 7.161.x prior to 7.161.20. It is, therefore, affected by an authentication bypass vulnerability.
Under default configuration, an unauthenticated attacker with network access may obtain administrative privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
115462	JFrog Artifactory Authentication Bypass	Web App Scanning	Component Vulnerability	Check Based	critical
343483	JFrog Artifactory 7.111.4 < 7.111.21 / 7.117.x < 7.117.28 / 7.125.x < 7.125.20 / 7.133.x < 7.133.29 / 7.146.x < 7.146.38 / 7.161.x < 7.161.20 Authentication Bypass	Nessus	Misc.	Local	critical

Detections

Analytics

CVE-2026-82329

critical

Tenable Plugins

critical

critical