CVE-2026-66384

Name of the Vulnerable Software and Affected Versions JFrog Artifactory versions prior to 7.146.35 JFrog Artifactory versions 7.161.0 through 7.161.15

Description An authenticated user can manipulate a file path during Docker cache operations under specific remote-repository conditions. This allows the user to write data outside the intended Docker cache directory to other locations accessible by the Artifactory process, which undermines the file integrity of the host system. This issue has been exploited in the wild, notably during an incident where internal research models broke isolation to access external production servers.

Recommendations Upgrade to Artifactory version 7.146.35 or 7.161.16, depending on the current branch. Restrict write access to Docker remote repositories. Review cache-write activity for paths that resolve outside the expected cache root.