A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a… (CVE-2026-107444)

The vulnerability in Katello's Docker Tags repositories API arises from improper enforcement of organization scoping when listing repositories for a Docker meta tag. An authenticated user authorized to view products in one organization can supply a tag identifier to retrieve repository metadata associated with Docker tags of another organization. This cross-organization information disclosure is due to insufficient access control checks in the API.

The impact is limited to unauthorized disclosure of repository configuration metadata across organization boundaries. There is no indication of integrity or availability impact. The CVSS v3.1 base score is 4.3 (medium), reflecting a network attack vector, low attack complexity, required privileges, no user interaction, and confidentiality impact only.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the Docker Tags repositories API to trusted users and monitor for unauthorized access attempts.