CVE-2026-65616

A vulnerability exists due to improper authorization validation in the refresh token signature, enabling non-admin users to acquire a signed JFrog administrator token. This could lead to unauthorized access and potential compromise of sensitive administrative functions. Organizations using JFrog products should prioritize remediation to mitigate the risk of privilege escalation and data breaches.