Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors exploited CVE-2026-82329, a critical authentication bypass in JFrog Artifactory, just days after public disclosure — demonstrating how narrow the window between patch release and active exploitation has become. The flaw allowed unauthenticated attackers to gain administrative privileges and mint admin tokens, effectively handing over full control of artifact repositories. Because Artifactory sits at the heart of software build pipelines, a compromise can cascade into supply chain attacks, enabling tampered packages or backdoored builds to reach downstream consumers. Organizations that delay patching internet-facing DevOps infrastructure expose not just themselves but every consumer of their software artifacts. This incident underscores that critical infrastructure components like artifact repositories must be subject to emergency patching SLAs — not routine patch cycles.