JFrog Artifactory: authenticated write outside the Docker repository cache path

Impact

Under specific remote-repository conditions an authenticated Artifactory user can write data outside the intended Docker cache path. The record describes an integrity-only primitive - no confidentiality or availability impact is claimed, and no code execution is asserted - but Artifactory is usually the registry a GPU fleet pulls its CUDA base images, driver container images and model-server images from, so an arbitrary-write primitive on the cache is a plausible step toward serving altered artifacts to every node that pulls. The CVE is KEV-flagged and the record links the OpenAI/Hugging Face incident technical report as a reference, so treat it as actively relevant rather than theoretical.

Who can reach it

An authenticated Artifactory user with network access to the instance who can drive a pull through an affected remote Docker repository. High attack complexity per the CVSS vector - the specific remote-repository conditions have to hold.

What to do

Upgrade Artifactory self-managed to a fixed release per the JFrog security advisories page; the record links the advisory index and release notes but does not name a fixed version, so read the advisory before scheduling. Rollout is an Artifactory service upgrade and restart, not fleet maintenance. Given the KEV flag, also audit recent writes under the Docker cache directory and re-verify the digests of base images your nodes have pulled.

References

Related entries

• Envoy: semicolon path parameters make routing pick an unprotected route for a protected resourceCVE-2026-73511 · Envoy HTTP path matching (ignore_path_parameters_in_path_matching, semicolon matrix parameters)Medium
• Envoy: scoped IPv6 address reconstruction aborts the proxy process in ORIGINAL_DST and QUIC pathsCVE-2026-73549 · Envoy Utility::copyInternetAddressAndPort and QUIC client-address handling (scoped IPv6 addresses)Medium
• Envoy: path normalization misses ..;param segments, bypassing path-based routing and RBACCVE-2026-73551 · Envoy (URL path normalization, dot segments with semicolon parameters)Medium
• Rancher Fleet: Helm template preprocessing reaches the network, leaking cluster metadata via DNSCVE-2026-75036 · Rancher Fleet controller (Helm template preprocessing / GitRepo bundle content)Medium
• containerd: containerd-shim abstract-socket API exposed to host-network containersCVE-2020-15257 · containerdMedium
• Kubernetes (kube-apiserver): Aggregated API server can redirect apiserver clientsCVE-2022-3172 · Kubernetes (kube-apiserver)Medium