Skip to content
fr Sign in
7.5 High

CVE-2026-65388 A remote attacker who controls a container registry may be able to direct a client's token request to a host of the…

Description

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Affected products and versions

Product Affected versions Fixed in
Containerization 0.41 earliest → < 0.41.0 0.41.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Containerization

The 3 CVEs of Containerization →
CVE-2026-113957 An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image… 5.6 Medium CVE-2026-20613 The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname… 7.8 High
Track this CVE