CVE-2026-68752 - Project Resource Managers may escalate privileges in JFrog Artifactory

Back Back to CVE browser

HIGH

Project Resource Managers may escalate privileges in JFrog Artifactory

Published Aug 12, 2026

7.2

HIGH

CVSS 3.1

EPSS 0.49%

Description

A Project Resource Manager may gain broader administrative privileges under specific conditions.

Affected products

Vendor Jfrog Product Artifactory Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <7.146.35

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jfrog

Artifactory

unaffected

Version	Status	Constraints
0	affected	<7.146.35

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-269

Improper Privilege Management

References (2)

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
vendor-advisoryRelease Notes
https://docs.jfrog.com/releases/docs/jfrog-security-advisories
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases		vendor-advisoryRelease Notes
https://docs.jfrog.com/releases/docs/jfrog-security-advisories		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner JFROG

Published Aug 12, 2026

Updated Aug 13, 2026

Reserved Jul 31, 2026

Link CVE-2026-68752

CISA Vulnrichment

Updated Aug 13, 2026

NVD

Status Analyzed

Modified Sep 2, 2026

Link CVE-2026-68752

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-68752