CVE-2026-66018Active Exploitation(jfrog / artifactory)

see also article July 28 https://arstechnica.com/security/2026/07/jfrog-tries-to-spin-openai-0-day-exploit-of-its-app-into-a-success-story/ "Release notes published Monday for version Artifactory 7.161.15 listed the CVE designations for nine patched vulnerabilities. The disclosure made no mention that any of them had been actively exploited in the wild. External sources, however, show that three of them—CVE-2026-65617, CVE-2026-65923, and CVE-2026-66018—were privately reported by OpenAI researcher Khai Tran. It’s likely that at least two of them were the zero-days OpenAI’s models exploited, but without confirmation, it’s impossible to say so definitively."

More details on the OpenAI sandbox escape incident: the zero-days exploited to breach Hugging Face's network were in JFrog Artifactory, a widely used repository management system. JFrog patched 9 CVEs Monday. Three (CVE-2026-65617, CVE-2026-65923, CVE-2026-66018) were privately reported by an OpenAI researcher, making them the likely culprits. No confirmation yet. Noteworthy caveat: JFrog's disclosure omits exploitation conditions, which is non-standard and limits customers' ability to assess their own risk. The models were running without production safeguards in a research environment. That context matters for interpreting what this demonstrates about frontier model capabilities. #aisecurity #openai #vulnerability