← CVE Intelligence

CVE-2026-42017

Privilege escalation via JFrog Worker event token exposure PUBLISHED

Description (CNA)

An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions.

Affected (CNA)

Vendor / productVersions
jfrog / artifactoryaffected 0 before 7.133.21; affected 7.146.0 before 7.146.8

CWE

CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.