Security Incident Notice

On August 31st 2026, an artifactory instance operated as part of the Nordix infrastructure by OpenInfra Europe AISBL was compromised through exploitation of CVE-2026-82329, a vulnerability in JFrog Artifactory disclosed on August 28, 2026.

The breach was discovered on September 15th 2026 after a legitimate user was denied access and the affected system was immediately isolated and investigation began.

The investigation is concluded and based on the current available data there is no evidence of artifacts tampered but as precautionary measure who downloaded artifacts from https://artifactory.nordix.org/ from August 28 and September 15, 2026 should immediately stop using them, remove them from their pipelines, and treat these packages as potentially compromised.

Recommended Actions:

Remove the affected packages from all projects, builds, and deployment pipelines immediately.

Review any system that downloaded and executed the packages for unusual activity.

Rebuild affected systems from known-good sources where possible.

Rotate credentials, tokens, SSH keys, and other secrets that may have been accessible to the package or build environment.

Review CI/CD workflows, repository permissions, recent commits, tags, releases, and automation activity for unauthorized changes.

Monitor for suspicious outbound connections, new SSH keys, modified workflows, unexpected package publications, scheduled tasks, or other persistence mechanisms

OpenInfra Europe
Participants

Platinum

Gold

Silver

Associate

Interested in Becoming a Participant in OpenInfra Europe?

Participation in OpenInfra Europe is open to OpenInfra Foundation members headquartered in Europe. OpenInfra Foundation Platinum, Gold, Silver, and Associate members are eligible to participate at their respective membership level at no additional cost, and individuals from these organizations have the opportunity to serve on the OpenInfra Europe advisory board.

Organizations that would like to take part should first become an OpenInfra Foundation member at openinfra.org/join.

Questions? Email [email protected].