Artifactory flaws chained in attacks deploying backdoor malware

Attackers are actively chaining two critical vulnerabilities in JFrog Artifactory to bypass authentication and escalate to administrative privileges, enabling deployment of a custom Rust-based backdoor in as little as five minutes. The root cause is unpatched, internet-facing software hosting sensitive build artifacts and software supply chain components — a high-value target for adversaries. The speed of compromise underscores that simply knowing about a vulnerability is insufficient; organizations must act on patches immediately, especially for externally accessible infrastructure. Because Artifactory sits at the heart of software development pipelines, a compromise can cascade into downstream supply chain attacks affecting every artifact and dependency it manages.