VULNERABILITY INTELLIGENCE

CVE-2026-28909

CVSS score6.5 MEDIUM
EPSS probability0.20%
CISA KEVNot currently listed
Published2026-04-30
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-522

Primary references