---
id: 7667
title: "Stealing the Artifact – JFrog Artifactory Vulnerability"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/red-teaming/stealing-the-artifact-jfrog-artifactory-vulnerability/"
published_at: "2026-08-14T00:00:00Z"
tags: ["supply-chain", "vulnerability-research", "jfrog", "artifactory", "cve-2026-42018", "auth-bypass", "cve-2026-69107"]
phying_url: "https://phying.com/item/7667"
lang: en
---

# Stealing the Artifact – JFrog Artifactory Vulnerability

## Summary

NetSPI chained four JFrog Artifactory vulnerabilities, including CVE-2026-42018 and CVE-2026-69107, to bypass authentication entirely and retrieve arbitrary artifacts as an unauthenticated attacker.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2026-08-14T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/red-teaming/stealing-the-artifact-jfrog-artifactory-vulnerability/
- **Phying News:** https://phying.com/item/7667