CVE-2026-66384

MEDIUM

CVE: CVE-2026-66384 - An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditionsSign in to save

CVSS

5.3

CVSS v3.1

EPSS

N/A

Exploit Prediction Score

Published

August 12, 2026

Exploitability

No EPSS data available

Description

An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.

Weaknesses

CWE-22

Affected Packages

No package data available.

Aliases

CVE-2026-66384

Related references

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
https://docs.jfrog.com/releases/docs/jfrog-security-advisories