JFrog Artifactory flaw exploited for admin tokens

Attackers are exploiting CVE-2026-82329, a critical JFrog Artifactory authentication bypass, to mint admin tokens. The flaw affects default self-managed configurations and was patched August 28 in versions including 7.161.20. watchTowr observed exploitation, including user enumeration and backdoor creation, starting September 1.