VULNERABILITY INTELLIGENCE

CVE-2026-66384

CVSS score5.3 MEDIUM
EPSS probability0.66%
CISA KEVKnown exploited vulnerability
Published2026-08-12
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Known Exploited Vulnerability

JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Vendor / product: JFrog / Artifactory

Description

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Weakness classification

  • reefs@jfrog.com: CWE-22

Primary references