Executive brief
Kraken is a peer-to-peer Docker image distribution system used to rapidly share container images across large fleets of machines. The system fails to validate downloaded image layers and manifests against their cryptographic signatures before caching them, allowing attackers positioned on the network path or operating malicious peers to inject poisoned container images. Compromised cached content is then automatically re-distributed to and executed by other hosts, potentially leading to widespread container image manipulation and code execution across the infrastructure.
Technical details
The vulnerability is a cryptographic verification bypass in the blob download and caching mechanism. Kraken agents download Docker image layers (blobs) from peers via torrent-like P2P transfers and validate them using only CRC32 checksums per piece, rather than verifying the full blob against its requested SHA-256 digest before committing to the content-addressable cache. An attacker on the network path or operating a malicious peer can supply substituted blob content with forged CRC32 values that pass per-piece validation, poisoning the cache with attacker-chosen container image layers or manifests. The attack requires network access to the P2P transfer path or the ability to participate as a peer, and the poisoned content is then re-seeded and executed by other hosts in the deployment. No patch availability information is provided in the advisory.
Affected products
- Uber Kraken <UNKNOWN>
Timeline
- 2026-08-18: disclosed