VULNERABILITY INTELLIGENCE
CVE-2026-70550
CVSS score6.5 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-08-25
Last modified2026-08-28
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are not authorized to read. The issue affects confidentiality and has been addressed in fixed Artifactory versions.
Weakness classification
- reefs@jfrog.com: CWE-862