Sensitive Information Exposure in Zot Container Image Registry by Project Zot

CVE-2025-48374

What is CVE-2025-48374?

Zot, the container image registry leveraging the Open Container Initiative Distribution Specification, has a vulnerability where the client secret is inadvertently logged in plain text during container startup when integrated with Keycloak as an OpenID Connect (OIDC) provider. This exposure poses a significant risk as the sensitive information can be accessed by unauthorized users with access to the logs. Users are advised to upgrade to version 2.1.3 or later to mitigate this security concern.

References