On August 31st 2026, an artifactory instance operated as part of the Nordix infrastructure by OpenInfra Europe AISBL was compromised through exploitation of CVE-2026-82329, a vulnerability in JFrog Artifactory disclosed on August 28, 2026.

The breach was discovered on September 15th 2026 after a legitimate user was denied access and the affected system was immediately isolated and investigation began.

The investigation is concluded and based on the current available data there is no evidence of artifacts tampered but as precautionary measure who downloaded artifacts from https://artifactory.nordix.org/ from August 28 and September 15, 2026 should immediately stop using them, remove them from their pipelines, and treat these packages as potentially compromised.

Recommended Actions:

• Remove the affected packages from all projects, builds, and deployment pipelines immediately.
• Review any system that downloaded and executed the packages for unusual activity.
• Rebuild affected systems from known-good sources where possible.
• Rotate credentials, tokens, SSH keys, and other secrets that may have been accessible to the package or build environment.
• Review CI/CD workflows, repository permissions, recent commits, tags, releases, and automation activity for unauthorized changes.
• Monitor for suspicious outbound connections, new SSH keys, modified workflows, unexpected package publications, scheduled tasks, or other persistence mechanisms