Is CVE-2026-70550 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-70550?

CVE-2026-70550 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-70550

Description

An authorization weakness in JFrog Artifactory Composer repository handling may allow an authenticated user, under specific conditions, to read package metadata from repositories they are not authorized to read. The issue affects confidentiality and has been addressed in fixed Artifactory versions.