CVE-2026-65616 - Vulnerability Details - OpenCVE

Description

Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

Published: 2026-07-27

Score: 8.8 High

EPSS: n/a

KEV: No

Impact:

Action:

Analysis

No analysis available yet.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

jfrog

artifactory

unaffected

Version	Status	Constraints
`0`	affected	< 7.146.27

No data.

No data.

No data available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
https://docs.jfrog.com/releases/docs/jfrog-security-advisories

History

Mon, 27 Jul 2026 20:30:00 +0000

Type	Values Removed	Values Added
Description		Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.
Title		Potential privilege escalation to JFrog administrator privileges
Weaknesses		CWE-347
References		https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases https://docs.jfrog.com/releases/docs/jfrog-security-advisories
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Subscriptions

No data.

MITRE

Status: PUBLISHED

Assigner: JFROG

Published: 2026-07-27T19:34:17.137Z

Updated: 2026-07-27T20:05:20.710Z

Reserved: 2026-07-22T12:02:46.789Z

Link: CVE-2026-65616

Vulnrichment

Updated: 2026-07-27T20:05:17.130Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-347
Improper Verification of Cryptographic Signature

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65616", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "state": "PUBLISHED", "assignerShortName": "JFROG", "dateReserved": "2026-07-22T12:02:46.789Z", "datePublished": "2026-07-27T19:34:17.137Z", "dateUpdated": "2026-07-27T20:05:20.710Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2026-07-27T19:34:17.137Z"}, "title": "Potential privilege escalation to JFrog administrator privileges", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature", "type": "CWE"}]}], "affected": [{"vendor": "jfrog", "product": "artifactory", "versions": [{"status": "affected", "version": "0", "lessThan": "7.146.27", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.<br>"}]}], "references": [{"url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories", "tags": ["vendor-advisory"]}, {"url": "https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.8, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "Kostya Kortchinsky | OpenAI", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-27T20:05:14.203525Z", "id": "CVE-2026-65616", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-27T20:05:20.710Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-65616", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-07-27T20:05:14.203525Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-27T20:05:17.130Z"}}], "cna": {"title": "Potential privilege escalation to JFrog administrator privileges", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Kostya Kortchinsky | OpenAI"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "jfrog", "product": "artifactory", "versions": [{"status": "affected", "version": "0", "lessThan": "7.146.27", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories", "tags": ["vendor-advisory"]}, {"url": "https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.", "supportingMedia": [{"type": "text/html", "value": "Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-347", "description": "CWE-347 Improper Verification of Cryptographic Signature"}]}], "providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2026-07-27T19:34:17.137Z"}}}, "cveMetadata": {"cveId": "CVE-2026-65616", "state": "PUBLISHED", "dateUpdated": "2026-07-27T20:05:20.710Z", "dateReserved": "2026-07-22T12:02:46.789Z", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "datePublished": "2026-07-27T19:34:17.137Z", "assignerShortName": "JFROG"}, "dataVersion": "5.2"}