JFrog Artifactory is subject to an actively exploited path traversal vulnerability that allows authenticated users to write data to restricted directory locations.

This vulnerability involves an improper limitation of a pathname to a restricted directory (CWE-22) occurring within remote repository configurations. An authenticated user can leverage specific repository conditions to bypass path restrictions and write data outside the designated Docker cache path.

The ability to write arbitrary data to restricted directories poses a severe risk to the integrity of the Artifactory instance and the underlying host system. While the CVSS score is 9.5, the criticality is compounded by the fact that this vulnerability is currently being exploited in the wild, which could lead to unauthorized file manipulation or potential escalation of privileges. Organizations relying on Artifactory for software supply chain management are at significant risk of system compromise if this flaw is not addressed.

Immediate Action: Upgrade JFrog Artifactory to version 7.146.35 or 7.161.16, or the latest available maintenance release, to remediate the directory traversal flaw.

Proactive Monitoring: Monitor system audit logs for unusual file write operations, specifically those involving paths outside of defined repository cache directories.

Compensating Controls: If patching is not immediately feasible, restrict access to the affected remote repository configurations and monitor network traffic for anomalous interaction with the Docker cache service.

Public Exploit Available: Unknown

Given the confirmed active exploitation of this vulnerability and its inclusion in the CISA Known Exploited Vulnerabilities catalog, immediate patching is mandatory. Security teams should prioritize the deployment of the provided vendor updates across all affected Artifactory instances to prevent unauthorized file system access and potential persistence by threat actors.