CVE-2026-42018 — Anonymous user token generation exposure in JFrog Artifactory
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
Published: 2026-08-12 · CVSS: 7.5 · CVSS 3.1
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7