CVE-2026-66015: JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.
Published Jul 27, 2026
·Updated
An authenticated privilege-escalation vulnerability in JFrog Platform may be exploited under admin-provisioned account conditions. Successful exploitation may grant temporary platform administrator access.
Affected Software
3 affected components
JFrog JFrog Platform
JFrog Artifactory>=7.146.0<7.146.34
JFrog Artifactory>=7.161.0<7.161.15
Event History
Jul 27, 2026
CVE Published
via MITRE·07:33 PM
Data Sourced
via MITRE·07:33 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-66015?
The severity of CVE-2026-66015 is rated high with a score of 7.2.
2
What is the impact of CVE-2026-66015?
CVE-2026-66015 allows for authenticated privilege escalation, potentially granting temporary platform administrator access.
3
How do I fix CVE-2026-66015?
To mitigate CVE-2026-66015, apply the latest security patches provided by JFrog for the platform.
4
Who is affected by CVE-2026-66015?
CVE-2026-66015 affects users of JFrog Platform with admin-provisioned accounts.
5
How can CVE-2026-66015 be exploited?
CVE-2026-66015 can be exploited by authenticated users leveraging specific conditions under admin-provisioned accounts.