JFROG ARTIFACTORY FLAW LETS HACKERS FORGE ADMIN TOKENS

Security researchers have confirmed active exploitation of the vulnerability in JFrog Artifactory, a widely-used repository management platform trusted by enterprises for storing software artifacts and dependencies. The authentication bypass allows attackers to forge administrative tokens without valid credentials, bypassing standard access controls. This grants them ability to modify, delete, or exfiltrate software packages—a critical supply chain risk. Affected organizations should immediately verify JFrog Artifactory versions and apply available patches. The vulnerability impacts multiple versions of the platform. Administrators should audit token creation logs and revoke suspicious tokens. JFrog has released patches addressing the flaw. The company recommends updating to the latest version and implementing additional access controls. Organizations running vulnerable instances face risk of compromised software builds and potential downstream distribution of malicious code to end users.