Authentication Flaw in Docker Registry for BBot by Black Lantern Security

CVE-2026-12566

What is CVE-2026-12566?

The docker_pull module in BBot improperly uses the realm parameter from the Docker registry's WWW-Authenticate response header as the authentication endpoint without proper validation. This flaw exposes the system to potential man-in-the-middle attacks, allowing an adversary to manipulate the authentication request and redirect it to an unauthorized server. As a result, sensitive authentication tokens could be compromised, posing significant risks to user security and data integrity.

References