CVE-2026-66380

MediumCVSS 4.3

Published: 12/08/2026(UTC)Updated: 12/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

11th percentile - higher than 11% of all known CVEs

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.

This could expose sensitive information about container images, violating access control.

Ensure repository read permissions are correctly configured and restrict access to metadata.

Original NVD description (English source)

An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.