Red HatCVE-2026-75939
Red Hat OpenShift Container Platform 4: improper signature check
High7.4CVE-2026-75939 · Published Sep 21, 2026 · updated Sep 24, 2026
A flaw was found in openshift/oc-mirror. The tool incorrectly verifies PGP (Pretty Good Privacy) release image signatures by checking for signature errors before the entire signed body is processed, leading to a bypass of the signature verification. A remote attacker, by intercepting or manipulating network traffic to the signature endpoint, could exploit this to craft a PGP message with a valid Red Hat release key ID but a forged signature. This enables the `oc-mirror` tool to accept and mirror a malicious release payload into a disconnected registry, potentially compromising the integrity of software deployments.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Red Hat OpenShift Container Platform 4 Product | all versions | No fix yet |
| all versions | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-347
More Red Hat advisories
All Red Hat| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 21 | Red Hat libstoragemgmt: buffer overflow | Medium5.5 | No fix yet |
| Sep 21 | usbredir: out-of-bounds write | Medium4.1 | No fix yet |
| Sep 21 | Red Hat SmallRye Fault Tolerance: resource exhaustion | High7.5 | No fix yet |
| Sep 21 | Red Hat fetchmail: stack buffer overflow | High8.1 | No fix yet |
| Sep 21 | Red Hat pki-core: improper authorization | High8.1 | No fix yet |
| Sep 21 | Red Hat Openshift Data Foundation 4: improper signature check | High7.1 | No fix yet |