CVE-2026-65616

No fix known EPSS <1%CVSS 8.8

Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

Published 2026-07-27 · CVE record · OSV

Products: Jfrog Artifactory