{"id":"CVE-2026-42018","title":"JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.","summary":"JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-287"],"vendor":"jfrog","product":"artifactory","affected":["artifactory < 7.111.20","artifactory >= 7.117.0, < 7.117.27","artifactory >= 7.125.0, < 7.125.19","artifactory >= 7.133.0, < 7.133.28","artifactory >= 7.146.0, < 7.146.8"],"patched":["artifactory 7.146.8"],"published":"2026-08-12","updated":"2026-10-01","sourceUpdated":"2026-10-01T19:17:20.413","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-42018","references":[{"url":"https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases","label":"reefs@jfrog.com"},{"url":"https://docs.jfrog.com/releases/docs/jfrog-security-advisories","label":"reefs@jfrog.com"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42018","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available","cve.org"],"epss":0.09805,"epssPercentile":0.95521,"kev":true,"kevDateAdded":"2026-09-11","kevDueDate":"2026-09-25","kevRansomware":false,"exploited":true,"exploits":{"nuclei":["CVE-2026-42018"],"checkedAt":"2026-10-27T18:59:33.030Z"},"exploitAvailable":true,"ssvc":{"exploitation":"active","automatable":"yes","technicalImpact":"partial","timestamp":"2026-10-01T18:06:12.895893Z"},"ingestedAt":"2026-09-14T15:23:07.483Z","slug":"CVE-2026-42018","body":"## Overview\n\nJFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.\n\n## Affected\n\n- `artifactory < 7.111.20`\n- `artifactory >= 7.117.0, < 7.117.27`\n- `artifactory >= 7.125.0, < 7.125.19`\n- `artifactory >= 7.133.0, < 7.133.28`\n- `artifactory >= 7.146.0, < 7.146.8`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `artifactory 7.146.8`","depth":"abyssal","depthScore":68,"depthScoreParts":{"impact":41.3,"likelihood":2,"exploitation":25,"ransomware":0},"changes":[{"seq":207749,"id":"CVE-2026-42018","ts":1789836592462,"field":"epss","old":"0.0092","new":"0.11038"},{"seq":112036,"id":"CVE-2026-42018","ts":1789186653062,"field":"exploit_available","old":"false","new":"true"}]}