CVE-2026-65388
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credent…
Published: 2026-09-16 · CVSS: 7.5 · CVSS 3.1
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7