---
id: CVE-2026-42018
title: >-
  JFrog Artifactory could return an internal anonymous-user token to an
  unauthenticated caller when anonymous access is disabled, potentially exposing
  sensitive resources.
summary: >-
  JFrog Artifactory could return an internal anonymous-user token to an
  unauthenticated caller when anonymous access is disabled, potentially exposing
  sensitive resources.
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-287
vendor: jfrog
product: artifactory
affected:
  - artifactory < 7.111.20
  - 'artifactory >= 7.117.0, < 7.117.27'
  - 'artifactory >= 7.125.0, < 7.125.19'
  - 'artifactory >= 7.133.0, < 7.133.28'
  - 'artifactory >= 7.146.0, < 7.146.8'
patched:
  - artifactory 7.146.8
published: '2026-08-12'
updated: '2026-10-01'
sourceUpdated: '2026-10-01T19:17:20.413'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-42018'
references:
  - url: 'https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases'
    label: reefs@jfrog.com
  - url: 'https://docs.jfrog.com/releases/docs/jfrog-security-advisories'
    label: reefs@jfrog.com
  - url: >-
      https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42018
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://www.wiz.io/blog/artifactory-under-attack-in-the-wild-exploitation-of-cve-2026-42016-cve-2026-4201
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - kev
  - in-the-wild
  - exploit-available
  - cve.org
epss: 0.09805
epssPercentile: 0.95521
kev: true
kevDateAdded: '2026-09-11'
kevDueDate: '2026-09-25'
kevRansomware: false
exploited: true
exploits:
  nuclei:
    - CVE-2026-42018
  checkedAt: '2026-10-27T18:59:33.030Z'
exploitAvailable: true
ssvc:
  exploitation: active
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-01T18:06:12.895893Z'
ingestedAt: '2026-09-14T15:23:07.483Z'
---

## Overview

JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.

## Affected

- `artifactory < 7.111.20`
- `artifactory >= 7.117.0, < 7.117.27`
- `artifactory >= 7.125.0, < 7.125.19`
- `artifactory >= 7.133.0, < 7.133.28`
- `artifactory >= 7.146.0, < 7.146.8`

## Remediation

Upgrade past the affected range:

- `artifactory 7.146.8`