CVE-2026-118763
Description
A flaw was found in @sigstore/oci. This vulnerability allows a malicious or compromised container registry to cause an information disclosure of sensitive authentication credentials. When pushing an artifact, the client sends an upload request to a registry-provided destination address without verifying that the host matches the trusted registry origin. As a result, client authentication headers and registry tokens are transmitted to an attacker-controlled server.
Statement
This vulnerability is rated as Moderate severity because credential exposure requires active user interaction and an intentional connection to an untrusted or compromised container registry. In typical Red Hat environments, artifact signing and publishing pipelines are configured to interact exclusively with known, enterprise-managed registries rather than arbitrary external endpoints. Consequently, an attacker cannot trigger this credential leakage remotely or passively without first compromising the target registry infrastructure or convincing an operator to publish to a rogue registry.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Files or Directories; Read Memory; Read Application Data
Sensitive data may be exposed to attackers.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
