CVE-2026-69104CWE-862broken-access-control

CVE-2026-69104

High · published August 25, 2026

CVSS v3.1
7.6
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

An authenticated user may initiate repository migration operations without required repository permissions, potentially causing information disclosure, unauthorized state changes, and service disruption. Fixed versions address the issue.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00308 · 22.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2026-08-25T19:16Z
References (2)
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases · [email protected]https://docs.jfrog.com/releases/docs/jfrog-security-advisories · [email protected]
EPSS history
Timeline
  • 27 AUG 06:42Z
    EPSS moved — → 0%
    epss
  • 25 AUG 15:09Z
    Potential unauthorized repository migration in JFrog Artifactory
    cvelistv5