CVE-2026-66014: Potential authentication bypass leading to privilege escalation in Artifactory
Published Jul 27, 2026
·Updated
JFrog Artifactory contains an authentication handling weakness in internal request processing that, under specific conditions, may allow an attacker to escalate privileges beyond the intended access level.
Affected Software
7 affected components
JFrog Artifactory
JFrog Artifactory<7.111.18
JFrog Artifactory>=7.117.0<7.117.25
JFrog Artifactory>=7.125.0<7.125.18
JFrog Artifactory>=7.133.0<7.133.27
JFrog Artifactory>=7.146.0<7.146.34
JFrog Artifactory>=7.161.0<7.161.15
Event History
Jul 27, 2026
CVE Published
via MITRE·07:29 PM
Data Sourced
via MITRE·07:29 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-66014?
The severity of CVE-2026-66014 is rated high with a score of 8.8.
2
How do I fix CVE-2026-66014?
To fix CVE-2026-66014, ensure you update JFrog Artifactory to the latest version that addresses this authentication handling weakness.
3
What systems are affected by CVE-2026-66014?
CVE-2026-66014 affects JFrog Artifactory, which may allow for privilege escalation under specific conditions.
4
What are the potential impacts of CVE-2026-66014?
The potential impacts of CVE-2026-66014 include unauthorized access and privilege escalation beyond intended access levels.
5
Is there a workaround for CVE-2026-66014?
Currently, no specific workarounds for CVE-2026-66014 have been suggested; updating the software is recommended.