Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure

Threat actors are taking advantage of a critical security flaw in JFrog Artifactory, just days after it was publicly disclosed. The vulnerability, which has a high CVSS score, allows for authentication bypass and could give attackers administrative access to Artifactory. The issue is related to an authentication weakness in the default configuration of JFrog Artifactory. This flaw has been assigned the identifier CVE-2026-82329. The rapid exploitation of this vulnerability by threat actors highlights the importance of prompt patching. Attackers are using this flaw to mint admin tokens, gaining elevated access to targeted systems.