CVE-2026-117685

Name of the Vulnerable Software and Affected Versions OCI registry (affected versions not specified)

Description An issue exists in the cross-repository blob mount process where the target package is validated against the public-only restriction of a token, but the source blob is only checked against the full account permissions of the token owner. An attacker using a public-only token with write:package scope can mount a blob from a private package into a public package namespace, provided the token owner has read access to the private package and write access to the public one. This allows private blobs, such as container layers, to be accessed and downloaded by any user via the public package.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.