CVE-2026-42018

JFrog Artifactory is vulnerable to a flaw that allows an unauthenticated user to receive an internal anonymous-user token, even when anonymous access is disabled. This could lead to unauthorized access to sensitive resources, posing a significant risk to organizations utilizing this software. Organizations using JFrog Artifactory should prioritize addressing this vulnerability to protect their sensitive data from potential exploitation.