CVE-2026-65921

Description

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

CVSS Vector

References

• https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases
• https://docs.jfrog.com/releases/docs/jfrog-security-advisories