<![CDATA[Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors]]>Attackers chained two vulnerabilities in JFrog Artifactory, the repository that many software build pipelines pull from, to seize administrator control of self-hosted servers and plant backdoors, according to a report from cloud security company Wiz.

Wiz observed the attacks between August 15 and September 8. JFrog had already fixed both flaws before that window, meaning only servers that had not been updated remained exposed to exploitation.

Key points:

  • Target: self-hosted JFrog Artifactory instances
  • Outcome: administrator control of the server and backdoor installation
  • Attack window observed by Wiz: August 15 to September 8
  • Both vulnerabilities were patched by JFrog prior to the observed attacks
  • Risk is limited to instances that were left unpatched

Mitigation:

  • Update self-hosted JFrog Artifactory deployments to a version containing the fixes for both flaws
  • Treat any instance that was unpatched during the attack window as potentially compromised and review it for signs of unauthorized administrative access or backdoors

Source: The Hacker News

Has your organization already patched its self-hosted Artifactory instances, or are you still working through the update?

]]>https://xploitlk.com/topic/313/attackers-chain-jfrog-artifactory-flaws-to-gain-admin-control-and-plant-backdoorsRSS for NodeTue, 27 Oct 2026 12:19:40 GMTSat, 12 Sep 2026 20:30:19 GMT60