Medium severity · published Aug 25, 2026
CVE-2026-70550
Potential unauthorized access to private Composer repository metadata in JFrog Artifactory
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are not authorized to read. The issue affects confidentiality and has been addressed in fixed Artifactory versions.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
artifactory · jfrog
7.161.0 before 7.161.19; 7.146.0 before 7.146.29 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-70550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-70550
docs.jfrog.com
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
docs.jfrog.com
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
More from artifactory
9.8
CVE-2026-82329
Potential authentication bypass leading to administrative access in Artifactory
8.8
CVE-2026-42016
Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
7.5
CVE-2026-42018
Anonymous user token generation exposure in JFrog Artifactory
5.3
CVE-2026-66384
Authenticated users may write data outside the intended Docker cache path
9.8
CVE-2022-0668
JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated…