{"data":{"id":"c7ab0a98-ebdb-4b0b-8066-7bc351017691","title":"CVE-2026-66384: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","summary":"JFrog Artifactory has a vulnerability where authenticated users can write data outside the intended Docker cache path (a directory where temporary files are stored) under certain conditions with remote repositories. This is a path traversal issue (a security flaw that lets attackers access files outside where they're supposed to) that is currently being exploited by attackers in real attacks.","solution":"Apply mitigations in accordance with vendor instructions from JFrog's security advisories (https://docs.jfrog.com/releases/docs/jfrog-security-advisories) and follow CISA's BOD 26-04 patching guidelines. If mitigations are unavailable, discontinue use of the product.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-66384","publishedAt":"2026-08-27T00:00:00.000Z","cveId":"CVE-2026-66384","cweIds":["CWE-22"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["JFrog Artifactory"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"active","epssScore":0.00264,"patchAvailable":true,"disclosureDate":"2026-08-27T00:00:00.000Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":null,"llmSpecific":false,"classifierConfidence":0.72,"researchCategory":null,"atlasIds":null}}