CVE-2026-66381

Description

A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.

Affected Platforms

Weakness Type

CWE-22

References

• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories