Hackers are exploiting a critical JFrog Artifactory flaw to forge administrator tokens, potentially giving them control over software repositories used by organisations to store and distribute packages.
The vulnerability, tracked as CVE-2026-82329, affects the default configuration of self-managed Artifactory installations. An unauthenticated attacker with network access can exploit the weakness to obtain administrative permissions without first logging in.
Researchers at offensive security firm watchTowr said they had observed attackers “minting themselves admin tokens”. The company has not disclosed details that would identify the organisations targeted or explain how widespread the activity is.
What the JFrog Artifactory flaw allows
An attacker who successfully creates an administrator token could enumerate users and groups, inspect federated environments, read stored artefacts and alter security settings. They could also tamper with existing software packages held in the repository.
That creates a risk beyond the Artifactory server itself. Repositories commonly supply binaries and dependencies directly to automated build and deployment systems, meaning a poisoned package could potentially deliver malicious code to downstream systems that already trust it.
“Administrative access to Artifactory reaches released artifacts that downstream systems already trust and pull automatically,” said Collin Hogue-Spears, senior director of solution management at application security company Black Duck.
Hogue-Spears also warned that JFrog access tokens operate as separate credentials, with their own expiry and revocation controls. As a result, installing a patched Artifactory version will not automatically invalidate tokens that may have been issued before the upgrade.
The precise scope of the attacks remains unclear. There is currently no confirmed information on the number of affected organisations, whether compromised servers were used to alter packages, or which indicators of compromise defenders should look for.
JFrog releases Artifactory security updates
JFrog addressed the vulnerability on August 28 through updates to several supported Artifactory release lines: versions 7.111.21, 7.117.28, 7.125.20, 7.133.29, 7.146.38 and 7.161.20.
The company said JFrog Cloud environments were already protected. Users running their own Artifactory infrastructure should apply the relevant update and review existing access tokens, including revoking and replacing credentials where necessary.
Details published by JFrog about the vulnerability are limited, beyond confirming that it is exploitable in the product’s default configuration. The impact has prompted warnings that compromising a package repository could provide a route into software development and deployment environments.
Vercel chief executive Guillermo Rauch has also suggested that the flaw’s significance may extend beyond Artifactory itself, although the connection between the vulnerability and recent research into autonomous artificial intelligence agents has not been established.
JFrog has been contacted for further information about the reported exploitation but has not issued a response.
