CVE-2026-66384
JFrog · Published August 12, 2026
5.3
CVSS v3.1
MEDIUMCISA KEV — Federal agencies must patch by deadline
Actively exploited in the wild
Patch availableGet patch
Description
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
Affected Products
- Artifactory < 7.146.35
- Artifactory < 7.161.16
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N