JFrog Artifactory contains a critical improper authentication vulnerability (CVE-2026-82329) that allows unauthenticated attackers with network access to gain administrative privileges under default configuration. The vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog and is subject to BOD 26-04 remediation requirements. JFrog has published security advisories and release notes for self-managed Artifactory instances. Organizations are urged to apply patches immediately as the flaw requires no authentication to exploit. The vulnerability poses significant risk to software development pipelines and artifact repositories. CISA has also issued forensic triage guidance as part of its implementation guidance for BOD 26-04. The severity is rated High given the default-configuration exploitability and potential for full administrative compromise.
