Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-65388

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credential

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apple

Description

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apple containerization

  • 0 to < 0.41.0affected

References