CVE-2026-66384

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Artifactory

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

12. Aug 2026

Ausgewertete Quellen

• Hersteller
  https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• Hersteller
  https://docs.jfrog.com/releases/docs/jfrog-security-advisories
• Hinweis
  https://openai.com/index/hugging-face-incident-and-the-road-ahead/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-66384
• CISA
  JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
• NVD
  CVE-2026-66384