Vulnerabilities / CVE-2026-66384

CVE-2026-66384

Published 2026-08-12 · published (not yet in NVD)

CVE-2026-66384

Authenticated users may write data outside the intended Docker cache path

Exploited in the wild: CISA added it to the Known Exploited Vulnerabilities catalog on 2026-08-27, with a fix-by date of 2026-09-10. Patch it first.

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

5.3 MEDIUM
CVSS 3.1 · CNA

0.7%
chance of exploitation in the next 30 days (EPSS; higher than 51% of CVEs)

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Scores

5.3CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NCNA

Affected products

jfrog artifactory: < 7.146.35; 7.161.0 to < 7.161.16

Weakness: CWE-22

2 references (advisories, patches, write-ups)

https://docs.jfrog.com/releases/docs/jfrog-security-advisories · vendor-advisory
https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases · vendor-advisory

Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website