This vulnerability (CVE-2026-66015) in JFrog Artifactory involves improper privilege management (CWE-269) that allows an authenticated user with an admin-provisioned account to escalate privileges temporarily to platform administrator level. The issue affects specific versions 7.146.0 and 7.161.0. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the vulnerability is not known to be exploited in the wild.

Successful exploitation grants temporary platform administrator access, which can lead to full control over the JFrog Artifactory platform, including potential unauthorized access to sensitive data and system configuration. This elevates the risk of data compromise, system manipulation, and disruption of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict admin provisioning of accounts to trusted users only and monitor for unusual privilege escalations. No official patch or workaround is currently documented by the vendor.