Security Flaw in oc-mirror Exposes System to Unauthenticated Access

CVE-2026-96577

What is CVE-2026-96577?

A vulnerability exists in oc-mirror where the embedded local cache registry is improperly configured to bind to all network interfaces without any authentication or encryption. This misconfiguration allows unauthenticated attackers situated on adjacent networks to gain access to the service. Such access enables these attackers to tamper with container images, remove cached images, or retrieve mirrored content without necessary restrictions, potentially leading to significant security breaches.

References