jfrog jfrog-cli vulnerabilities (CVE)

CVE records published for jfrog jfrog-cli, newest first. Follow to get an email when a new one appears.

1 results

9.0Critical

CVE-2026-92892 1 month ago

Potential command execution on the host running JFrog CLI.

jfrog jfrog-cli

Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.