Attackers Exploit Critical Authentication Bypass in JFrog Artifactory

JFrog has confirmed that CVE-2026-82329 affects Artifactory repository manager instances globally. The vulnerability permits unauthenticated attackers to bypass authentication controls and achieve administrative privileges. Security researchers and Dark Reading report that exploitation began shortly after public disclosure on 2026-09-01. Active exploitation has been observed in the wild, with attackers targeting CI/CD pipelines and artifact storage repositories. The severity of the flaw stems from the potential for code injection, supply chain compromise, and exfiltration of proprietary credentials and artifacts. JFrog has released security updates addressing the vulnerability. Users are strongly advised to apply the latest Artifactory version containing the fix and to review access controls to mitigate risk.