Red Hat OpenShift Flaw Lets Attackers Bypass Signature Checks and Inject Malicious Release Images
Brief
Red Hat has disclosed an Important OpenShift vulnerability that could allow attackers to bypass release-image signature verification and insert malicious payloads into disconnected registries.
Tracked as CVE-2026-75939, the issue affects the oc-mirror utility and carries a CVSS v3. 1 score of 7.
- The flaw stems from an error in how openshift/oc-mirror validates PGP-signed OpenShift release images. The utility checks for a signature error before processing the complete signed message body.
Red Hat OpenShift Flaw
That ordering defect can cause the signature-verification process to accept a crafted PGP message even though its signature is forged. An attacker would need to intercept or manipulate traffic between oc-mirror and the endpoint used to retrieve release signatures.