Curated threat intel for security leaders
threat 2026-09-02

JFrog Artifactory authentication bypass now being exploited in the wild

JFrog Artifactory authentication bypass now being exploited in the wild

Attackers observed exploiting CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, generating administrator tokens and probing sensitive data.

Bottom line: Security teams must immediately monitor and investigate all JFrog Artifactory deployments for signs of exploitation.

What's happening: Attackers, believed to be nation-state actors, are exploiting CVE-2026-82329 to gain unauthorized access to JFrog Artifactory instances worldwide, particularly in the United States, United Kingdom, and India.

What to do: Security leaders should immediately configure JFrog Artifactory to enforce strict authentication and authorization policies, and ensure all administrators have unique, multi-factor-protected credentials.

Source: CSO Online