Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being actively exploited shortly after public disclosure, allowing attackers to mint admin tokens and gain full administrative privileges without valid credentials. This incident highlights the dangerous window between vulnerability disclosure and patch deployment, particularly for self-hosted instances where patching is the customer's responsibility. Authentication bypass flaws in artifact repositories are especially severe, as Artifactory often sits at the heart of software supply chains, meaning compromise can cascade into poisoned build pipelines or stolen secrets. The rapid exploitation timeline underscores that threat actors monitor CVE disclosures closely and weaponize critical flaws within hours or days.