Auth Weakness in JFrog Artifactory Metadata Handling
CVE-2026-65922 Published on July 27, 2026
Potential unauthorized modification of Artifactory internal metadata
An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to restricted internal metadata areas under specific conditions. Successful abuse is limited to integrity and availability impact at a low level; confidentiality is not affected.
Vulnerability Analysis
CVE-2026-65922 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and a small impact on availability.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-65922 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-65922
Want to know whenever a new CVE is published for JFrog Artifactory? stack.watch will email you.
Affected Versions
jfrog artifactory:- Before 7.111.18 is affected.
- Version 7.117.0 and below 7.117.25 is affected.
- Version 7.125.0 and below 7.125.18 is affected.
- Version 7.133.0 and below 7.133.27 is affected.
- Version 7.146.0 and below 7.146.34 is affected.
- Version 7.161.0 and below 7.161.15 is affected.