Executive brief
Red Hat's oc-mirror tool, used to manage container image registries in disconnected OpenShift environments, contains a flaw in how it verifies the authenticity of release images using PGP signatures. An attacker who can intercept network traffic can forge a malicious release payload that the tool will accept as legitimate, allowing compromised container images to be mirrored into production registries and potentially compromising all deployments that use those images.
Technical details
The vulnerability stems from improper verification of PGP cryptographic signatures (CWE-347): the tool checks for signature errors before the entire signed message body is processed, allowing an attacker to craft a PGP message with a valid Red Hat release key ID but a forged signature that bypasses validation. An unauthenticated remote attacker with the ability to intercept or manipulate traffic to the signature endpoint can exploit this to inject malicious container images. A mitigation or patch is not currently available.
Affected products
- Red Hat oc-mirror
Timeline
- 2026-09-21: disclosed