CVE-2026-92892

CVSS 9.0 (critical) · published 2026-10-13

Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.

Weakness: CWE-88

Source: NVD CVE-2026-92892

References

• https://docs.jfrog.com/releases/docs/jfrog-security-advisories
• https://github.com/jfrog/jfrog-cli/releases

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.