Vulnerability Details CVE-2026-66018
Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can select a readable repository parameter while retrieving environment properties for a protected build, exposing build environment secrets (confidentiality impact; no integrity or availability impact demonstrated).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.6%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2026-66018
-
cpe:2.3:a:jfrog:artifactory:*