NetSight
high7.1

CVE-2026-65922

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal met…

Impact

An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is not affected.

Affected products

VendorProductAffected versions
JfrogArtifactory
before 7.111.18
from 7.117.0 before 7.117.25
from 7.125.0 before 7.125.18
from 7.133.0 before 7.133.27
from 7.146.0 before 7.146.34
from 7.161.0 before 7.161.15

Weakness classification

References