Description (CNA)
Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| jfrog / jfrog-cli | affected 0 before 2.128.0 |
CWE
CWE-88
References
- https://docs.jfrog.com/releases/docs/jfrog-security-advisories
- https://github.com/jfrog/jfrog-cli/releases
ADP enrichment
No English description supplied.
No references supplied.