Nadavgb

**Name of the Vulnerable Software and Affected Versions** jfrog-cli versions prior to 2.126.1 **Description** Improper sanitization of user-controlled arguments passed to underlying command execution allows for argument injection. Under specific configurations, this can lead to arbitrary code execution on the host system. The issue is not exploitable if untrusted input cannot reach the CLI invocation. **Recommendations** Update jfrog-cli to version 2.126.1 or later.