CVE-2026-92892

CRITICAL 9.0CVE-2026-92892 · Published 13/10/2026 · updated 22/10/2026

In short

CVE-2026-92892 is a CRITICAL (CVSS 9.0) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Potential arbitrary code execution under specific configurations. Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.

References

docs.jfrog.com/releases/docs/jfrog-security-advisories
jfrog/jfrog-cli release

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free