CVE-2026-75939
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
In openshift/oc-mirror, the tool incorrectly verifies PGP release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of signature verification. A remote attacker, by intercepting or manipulating network traffic to the signature endpoint, could craft a PGP message with a valid Red Hat release key ID but a forged signature, enabling the oc-mirror tool to accept and mirror a malicious release payload into a disconnected registry.
Risk Assessment
The vulnerability may compromise the integrity of software deployments by introducing a malicious release payload into a disconnected registry. This could result in untrusted code running in a production environment.
Recommendation
Upgrade oc-mirror to a version containing the PGP signature verification fix. Until patched, verify the integrity of mirrored payloads using additional independent methods.
Other vulnerabilities in oc-mirror
See all- CVE-2026-96577High
A flaw was found in oc-mirror. During mirroring operations, the embedded local cache registry binds to all network interfaces without authentication or encryption instead of restricting access to the local system. An unauthenticated attacker on an adjacent network can connect to the exposed service to push tampered container images, delete cached images, or access mirrored content.
- CVE-2026-101295High
Path traversal / arbitrary file write vulnerability in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), oc-mirror extracts tar entries from catalog image layers without validating that file paths resolve within the intended destination directory.
Original NVD description (English source)
A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature verification. A remote attacker, by intercepting or manipulating network traffic to the signature endpoint, could exploit this to craft a PGP message with a valid Red Hat release key ID but a forged signature. This enables the `oc-mirror` tool to accept and mirror a malicious release payload into a disconnected registry, potentially compromising the integrity of software deployments.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS