{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-92892", "assignerOrgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "state": "PUBLISHED", "assignerShortName": "JFROG", "dateReserved": "2026-09-17T08:56:23.499Z", "datePublished": "2026-10-13T17:47:43.012Z", "dateUpdated": "2026-10-16T15:31:55.790Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "48a46f29-ae42-4e1d-90dd-c1676c1e5e6d", "shortName": "JFROG", "dateUpdated": "2026-10-13T17:47:43.012Z"}, "title": "Potential command execution on the host running JFrog CLI.", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-88", "description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')", "type": "CWE"}]}], "affected": [{"vendor": "jfrog", "product": "jfrog-cli", "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.126.0", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Potential arbitrary code execution, under specific configurations.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Potential arbitrary code execution, under specific configurations.</p>"}]}], "references": [{"url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories", "tags": ["vendor-advisory"]}, {"url": "https://github.com/jfrog/jfrog-cli/releases", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 9, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "credits": [{"lang": "en", "value": "nadavgb (reported via HackerOne)", "type": "finder"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-92892", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-16T15:13:05.908062Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-16T15:31:55.790Z"}}]}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "jfrog-cli", "vendor": "jfrog", "versions": [{"lessThanOrEqual": "2.126.0", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "reefs@jfrog.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Potential arbitrary code execution, under specific configurations."}], "id": "CVE-2026-92892", "lastModified": "2026-10-16T16:22:43.160", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 6.0, "source": "reefs@jfrog.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-92892", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-16T15:13:05.908062Z", "version": "2.0.3"}}]}, "published": "2026-10-13T18:17:26.530", "references": [{"source": "reefs@jfrog.com", "url": "https://docs.jfrog.com/releases/docs/jfrog-security-advisories"}, {"source": "reefs@jfrog.com", "url": "https://github.com/jfrog/jfrog-cli/releases"}], "sourceIdentifier": "reefs@jfrog.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-88"}], "source": "reefs@jfrog.com", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/jfrog/jfrog-cli: Potential command execution on the host running JFrog CLI.", "id": "2550745", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2550745"}, "csaw": false, "cvss3": {"cvss3_base_score": "9.0", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-88", "details": ["Potential arbitrary code execution, under specific configurations.", "A flaw was found in JFrog CLI. Under specific configurations, a remote attacker can achieve arbitrary code execution on the host running the utility by exploiting improper command argument handling. Successful exploitation allows the attacker to run unauthorized commands within the context of the host environment."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-92892", "public_date": "2026-10-13T17:47:43Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-92892\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92892\nhttps://docs.jfrog.com/releases/docs/jfrog-security-advisories\nhttps://github.com/jfrog/jfrog-cli/releases"], "statement": "A critical command-execution flaw was found in JFrog CLI. Red Hat provides this utility only through the Fedora and EPEL community projects; it is not shipped in Red Hat Enterprise Linux. Under specific configurations, a remote attacker can exploit improper command argument handling to achieve arbitrary code execution on the host running the utility, allowing unauthorized commands to run in the context of the host environment. The issue is rated critical with a CVSS 3.1 score of 9.0 (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H), where the high attack complexity reflects that exploitation depends on specific configurations. The affected Fedora and EPEL packages are handled through the community (delegated) process, and a fix is being pursued there; the Red Hat severity matches the upstream rating.", "threat_severity": "Critical"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2.126.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "jfrog-cli", "source": "cna", "vendor": "jfrog"}, "product": "jfrog-cli", "vendor": "jfrog"}], "created": "2026-10-13T21:00:17.500545+00:00", "updated": "2026-10-21T20:24:55.952352+00:00", "vendors": ["jfrog", "jfrog$PRODUCT$jfrog-cli"]}