PT-2026-103761 · Red Hat · Assisted Installer For Red Hat Openshift Container Platform 2+1
CVE-2026-96577
·
Published
2026-10-01
·
Updated
2026-10-01
CVSS v3.1
7.1
High
| Vector | AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N |
A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Assisted Installer For Red Hat Openshift Container Platform 2
Red Hat Openshift Container Platform 4