CVEvulnerability

CVE-2026-28909

6.5 MEDIUM Published 2026-04-30 Modified 2026-10-26 Official page ↗
Status
Analyzed
Published
2026-04-30
Last modified
2026-10-26
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-522

Description

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

Affected configurations

• apple container (< 0.12.3)

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References