A critical security flaw in JFrog Artifactory, a widely used tool for managing software builds and code packages, is already being exploited by attackers just days after a patch was released.

• What it is: An authentication bypass (CVE-2026-82329, severity 9.8 out of 10) that lets an attacker with no login credentials gain full administrator access to an Artifactory server running its default configuration.
• Who is affected: Businesses or IT teams running a self-managed JFrog Artifactory server, commonly used by software development and DevOps teams to store and distribute code.
• What the risk is: Once attackers have admin access they can tamper with software builds, steal credentials, and potentially push malicious code downstream to customers.
• What to do: Update to Artifactory version 7.161.20 or later immediately, review admin access logs for anything unusual, and rotate any credentials stored in the system.

If your business or a vendor you rely on runs Artifactory, we recommend treating this as urgent and confirming the patch is applied. Source: The Hacker News.