Executive brief
A security vulnerability in JFrog Artifactory allows standard users to escalate their privileges to a full administrator. By exploiting a flaw in how the system validates security tokens, an attacker can gain unauthorized control over the platform, potentially leading to the theft of sensitive software artifacts or disruption of the development pipeline. Organizations using self-managed versions of Artifactory should upgrade immediately to prevent unauthorized administrative access.
Technical details
The vulnerability is classified as an improper verification of cryptographic signatures (CWE-347) within the refresh token mechanism. Due to incorrect authorization validation during the token signature process, an authenticated user with low privileges can generate or obtain a validly signed administrator-level token. This is a network-based attack that requires basic user authentication but no user interaction. Successful exploitation results in full privilege escalation to the administrator role, granting the attacker complete control over the JFrog Platform. The issue is addressed in Artifactory version 7.146.27 and later.
Affected products
- JFrog Artifactory Self-Managed < 7.146.27
Timeline
- 2026-07-27: disclosed
- 2026-07-27: advisory
- 2026-07-27: patched: Fixed in version 7.146.27