Skip to content
fr Sign in
7.1 High

CVE-2026-96577 A flaw was found in oc-mirror

Description

A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.

Affected products and versions

Product Affected versions Fixed in
Assisted Installer for Red Hat OpenShift Container Platform 2 Versions not published
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat OpenShift Container Platform 4.21 1790777129 earliest → < 1790777129 1790777129
Red Hat OpenShift Container Platform 4.22 1790775357 earliest → < 1790775357 1790775357
Red Hat OpenShift Container Platform 4.20 1790782357 earliest → < 1790782357 1790782357
Red Hat OpenShift Container Platform 4.19 1790778095 earliest → < 1790778095 1790778095
Red Hat OpenShift Container Platform 4.18 1790828598 earliest → < 1790828598 1790828598

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Assisted Installer for Red Hat OpenShift Container Platform 2

The 27 CVEs of Assisted Installer for Red Hat OpenShift Container Platform 2 →
CVE-2026-114406 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 6.8 Medium CVE-2026-101295 Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction 7.3 High CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical
Track this CVE