CVE-2026-70550 — Potential unauthorized access to private Composer repository metadata in JFrog Artifactory
An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositorie…
Published: 2026-08-25 · CVSS: 6.5 · CVSS 3.1
An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are not authorized to read. The issue affects confidentiality and has been addressed in fixed Artifactory versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7