Executive brief
JFrog Artifactory, a repository manager used to store and manage software build artifacts, is vulnerable to a security flaw in how it handles compressed archives. An attacker with low-level access could upload a malicious file that, when processed, writes data to unauthorized locations on the server's file system. This could lead to the corruption of system files, unauthorized data access, or a complete takeover of the application server.
Technical details
A path validation weakness (CWE-22) exists in the archive extraction and write handling components of JFrog Artifactory. The vulnerability is rooted in insufficient sanitization of archive entries containing traversal sequences (e.g., '../'). An authenticated attacker with low privileges can exploit this over the network by submitting a specially crafted archive, allowing them to write arbitrary files to locations outside the intended build artifacts directory. This can result in full system compromise, including remote code execution or data exfiltration. The issue is addressed in several maintenance releases including 7.111.18, 7.117.25, 7.125.18, 7.133.27, 7.146.34, and 7.161.15.
Affected products
- JFrog Artifactory < 7.111.18, 7.117.0 to < 7.117.25, 7.125.0 to < 7.125.18, 7.133.0 to < 7.133.27, 7.146.0 to < 7.146.34, 7.161.0 to < 7.161.15
Timeline
- 2026-07-27: disclosed
- 2026-07-27: advisory
- 2026-07-27: patched