CVE-2026-66382: Authenticated users may write files outside the intended Artifactory work directory
Published Aug 12, 2026
·Updated
An authenticated user may write files outside the intended Artifactory work directory under specific conditions.
Affected Software
3 affected components
JFrog Artifactory
JFrog Artifactory<7.146.35
JFrog Artifactory>=7.161.0<7.161.16
Event History
Aug 12, 2026
CVE Published
via MITRE·03:08 PM
Data Sourced
via MITRE·03:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-66382?
The severity of CVE-2026-66382 is rated as medium with a score of 4.3.
2
What type of vulnerability is CVE-2026-66382?
CVE-2026-66382 is a path traversal vulnerability.
3
How can CVE-2026-66382 be exploited?
CVE-2026-66382 can be exploited by an authenticated user who writes files outside the intended Artifactory work directory under specific conditions.
4
How do I fix CVE-2026-66382?
To fix CVE-2026-66382, ensure that proper access controls and file write restrictions are implemented in the Artifactory environment.
5
Who is affected by CVE-2026-66382?
Authenticated users of Artifactory may be affected by CVE-2026-66382 if proper security measures are not in place.