CVE-2026-66015 — JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.

CVE-2026-66015

JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation. PUBLISHED

Description (CNA)

An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access.

Affected (CNA)

Vendor / product	Versions
jfrog / artifactory	affected 7.146.0 before 7.146.34; affected 7.161.0 before 7.161.15

CWE

CWE-269

References

https://docs.jfrog.com/releases/docs/jfrog-security-advisories
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.