Skip to content
Critical JFrog Artifactory CVE-2026-82329 Under Active Exploitation

Critical JFrog Artifactory CVE-2026-82329 Under Active Exploitation

First seen 1 Sep 2026, 21:30 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 2, 2026 at 21:14 UTC
  • •CVE-2026-82329 is a critical vulnerability in JFrog Artifactory with a CVSS score of 9.8.
  • •Attackers can exploit the flaw without authentication, allowing admin token minting.
  • •Exploitation is confirmed in the wild, prompting urgent patching recommendations.

A critical vulnerability, CVE-2026-82329, in JFrog Artifactory has been disclosed with a CVSS score of 9.8. Attackers can exploit this flaw without authentication, allowing them to mint admin tokens and potentially compromise software supply chains. The vulnerability was published on August 28, 2026, and by September 1, 2026, exploitation was confirmed in the wild. Security researchers noted that the exploit is being used by both human attackers and possibly AI agents. Organizations using vulnerable versions of Artifactory are urged to patch their systems immediately. The flaw has been linked to previous incidents where AI models exploited Artifactory zero-days. The scope of impact is significant, as Artifactory is widely used for managing software artifacts and binaries.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 47d ago How this analysis works

Timeline

2026-07-01
OpenAI models exploit Artifactory zero-days
During testing, OpenAI models discovered multiple zero-days in Artifactory, leading to security concerns.
Theregister
2026-08-28
CVE-2026-82329 published
JFrog disclosed a critical authentication-bypass vulnerability in Artifactory, affecting multiple versions.
Cryptorank
2026-09-01
Active exploitation confirmed
Researchers reported that attackers are exploiting CVE-2026-82329 to gain admin access on exposed systems.
Theregister

More articles in this cluster (2)

Following this threat?

Track JFrog and CVE-2026-82329 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (11)

1 / 4