{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-92892", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "state": "PUBLISHED", "assignerShortName": "JFROG", "dateReserved": "2026-09-17T08:56:23.499Z", "datePublished": "2026-10-13T17:47:43.012Z", "dateUpdated": "2026-10-22T16:06:56.066Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2026-10-22T16:06:56.066Z"}, "title": "Potential command execution on the host running JFrog CLI.", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-88", "description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')", "type": "CWE"}]}], "affected": [{"vendor": "jfrog", "product": "jfrog-cli", "versions": [{"status": "affected", "version": "0", "lessThan": "2.128.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Potential arbitrary code execution under specific configurations.\nUpdated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Potential arbitrary code execution under specific configurations.<br>Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.</p>"}]}], "references": [{"url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories", "tags": ["vendor-advisory"]}, {"url": "https://github.com/jfrog/jfrog-cli/releases", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "nadavgb (reported via HackerOne)", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-92892", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:13:05.908062Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:31:55.790Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-92892", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:13:05.908062Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:30:22.312Z"}}], "cna": {"title": "Potential command execution on the host running JFrog CLI.", "credits": [{"lang": "en", "type": "finder", "value": "nadavgb (reported via HackerOne)"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "jfrog", "product": "jfrog-cli", "versions": [{"status": "affected", "version": "0", "lessThan": "2.128.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories", "tags": ["vendor-advisory"]}, {"url": "https://github.com/jfrog/jfrog-cli/releases", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Potential arbitrary code execution under specific configurations.\nUpdated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.", "supportingMedia": [{"type": "text/html", "value": "<p>Potential arbitrary code execution under specific configurations.<br>Updated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-88", "description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"}]}], "providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2026-10-22T16:06:56.066Z"}}}, "cveMetadata": {"cveId": "CVE-2026-92892", "state": "PUBLISHED", "dateUpdated": "2026-10-22T16:06:56.066Z", "dateReserved": "2026-09-17T08:56:23.499Z", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "datePublished": "2026-10-13T17:47:43.012Z", "assignerShortName": "JFROG"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "jfrog-cli", "vendor": "jfrog", "versions": [{"lessThan": "2.128.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "reefs@jfrog.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Potential arbitrary code execution under specific configurations.\nUpdated October 22, 2026: Affected versions now include JFrog CLI v2.127.0. For remediation, update to v2.128.0 or later."}], "id": "CVE-2026-92892", "lastModified": "2026-10-22T17:17:01.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 6.0, "source": "reefs@jfrog.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-92892", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:13:05.908062Z", "version": "2.0.3"}}]}, "published": "2026-10-13T18:17:26.530", "references": [{"source": "reefs@jfrog.com", "url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}, {"source": "reefs@jfrog.com", "url": "https://github.com/jfrog/jfrog-cli/releases"}], "sourceIdentifier": "reefs@jfrog.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-88"}], "source": "reefs@jfrog.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/jfrog/jfrog-cli: Potential command execution on the host running JFrog CLI.", "id": "2550745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2550745"}, "csaw": false, "cvss3": {"cvss3_base_score": "9.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-88", "details": ["Potential arbitrary code execution, under specific configurations.", "A flaw was found in JFrog CLI. Under specific configurations, a remote attacker can achieve arbitrary code execution on the host running the utility by exploiting improper command argument handling. Successful exploitation allows the attacker to run unauthorized commands within the context of the host environment."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-92892", "public_date": "2026-10-13T17:47:43Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-92892\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92892\nhttps://docs.jfrog.com/releases/docs/jfrog-security-advisories\nhttps://github.com/jfrog/jfrog-cli/releases"], "statement": "A critical command-execution flaw was found in JFrog CLI. Red Hat provides this utility only through the Fedora and EPEL community projects; it is not shipped in Red Hat Enterprise Linux. Under specific configurations, a remote attacker can exploit improper command argument handling to achieve arbitrary code execution on the host running the utility, allowing unauthorized commands to run in the context of the host environment. The issue is rated critical with a CVSS 3.1 score of 9.0 (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), where the high attack complexity reflects that exploitation depends on specific configurations. The affected Fedora and EPEL packages are handled through the community (delegated) process, and a fix is being pursued there; the Red Hat severity matches the upstream rating.", "threat_severity": "Critical"}