Critical JFrog Artifactory Authentication Bypass Exploited in the Wild

Security researchers warn that a critical authentication-bypass vulnerability (CVE-2026-82329) in JFrog Artifactory enables attackers to create administrator access tokens, and watchTowr reported exploitation in the wild as of September 1. The report highlights the high risk to CI/CD pipelines and software supply chains—attackers with admin tokens can exfiltrate or modify artifacts, upload backdoored packages, alter permissions, and establish persistence—and advises organizations to patch, verify exposed instances, and review authentication activity.