REPRO-2026-00297: JFrog Artifactory privilege escalation allowing low-privileged users to obtain elevated permissions
REPRO-2026-00297 is verified against Artifactory · product affected versions: <7.146.27 fixed version: 7.146.27 vulnerability class: Privilege Escalation This high reproduction includes runnable sandbox proof, artifacts, and a plain-text agent view under REPRO-2026-00297.
pruva-verify REPRO-2026-00297 curl -O https://pruva.dev/api/v1/reproductions/REPRO-2026-00297/artifacts/bundle/repro/reproduction_steps.sh && chmod +x reproduction_steps.sh && ./reproduction_steps.sh JFrog Artifactory self-managed releases list RTDEV-92030 as a high-severity General issue fixed in Artifactory 7.146.27. The release note states: 'Fixed a privilege-escalation vulnerability that could allow a low-privileged user to obtain elevated permissions.' This should be tracked as a privilege-escalation issue in Artifactory self-managed deployments. Public release-note evidence is currently the primary source; no CVE identifier was provided in the release notes snippet reviewed.
The agent's step-by-step process — every tool call, every handoff, the moment the exploit fired.
Loading session...
Scripts, logs, diffs, and output captured during the reproduction.