7.1
High
CVE-2026-96577 A flaw was found in oc-mirror
Description
A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift Container Platform 4.21 1790777129 | earliest → < 1790777129 | 1790777129 |
| Red Hat OpenShift Container Platform 4.22 1790775357 | earliest → < 1790775357 | 1790775357 |
| Red Hat OpenShift Container Platform 4.20 1790782357 | earliest → < 1790782357 | 1790782357 |
| Red Hat OpenShift Container Platform 4.19 1790778095 | earliest → < 1790778095 | 1790778095 |
| Red Hat OpenShift Container Platform 4.18 1790828598 | earliest → < 1790828598 | 1790828598 |
Other CVEs of Assisted Installer for Red Hat OpenShift Container Platform 2
The 27 CVEs of Assisted Installer for Red Hat OpenShift Container Platform 2 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Medium
CVE-2026-101295
Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction
7.3
High
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Medium
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
9.6
Critical