JFrog Artifactory Token Swap Chain Yields Admin Access on Unpatched 7.133-7.161 Builds

Attackers first queried an internal token endpoint to receive an anonymous-user token despite disabled anonymous access. They then posted that token to the token-creation endpoint, where signature validation alone permitted scope escalation to administrator privileges while preserving the anonymous username in logs. The resulting token enabled rapid creation of persistent admin accounts and deployment of malicious Groovy plugins that executed arbitrary code on the server. Wiz telemetry recorded the full sequence completing in under five minutes on affected instances. Attackers dropped HTTP-based droppers into /tmp, deployed a custom Rust implant with C2 capabilities, and in separate campaigns leveraged CVE-2026-82329 to extract cluster join keys. Fastly recorded 406000 exploitation attempts on 2 September, confirming broad scanning immediately after public exploit release. The attack surface is narrower than either flaw alone because both conditions must coexist; servers on the 7.146 and 7.161 branches escaped the first CVE but remained exposed to the 9.8-rated bypass. Official JFrog advisories listed per-branch fixed builds, yet CISA added only the standalone flaw to KEV, leaving the chained path under-emphasized in federal guidance. Operators must enumerate every self-hosted Artifactory instance, verify exact build numbers against the August 2026 advisories, and audit plugin directories and token issuance logs for entries showing token:anonymous. Persistent scanning for CVE-2026-82329 will continue until patching coverage exceeds 80 percent of exposed instances.