CVE-2026-65616

Description

Incorrect authorization validation in refresh token signature allows non-admin users to obtain a signed JFrog administrator token.

Affected Platforms

Weakness Type

CWE-347

References

• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories