CVE-2026-70547

Impact

An authenticated user without repository read permission may access package metadata under specific conditions.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories