CVE-2026-107444: Authorization Bypass Through User-Controlled Key in Red Hat Red Hat Hardened Images
Description
CVE-2026-107444 is an authorization bypass vulnerability in Red Hat Hardened Images affecting the Katello Docker Tags repositories API. Authenticated users with permission to view products in one organization may access repository metadata from another organization by manipulating the Docker tag identifier. This leads to unauthorized disclosure of repository configuration information across organizational boundaries. The vulnerability has a medium severity with a CVSS score of 4.3.
CVSS v3.1
Score 4.3medium
Affected software
Red Hat
Red Hat Hardened Images
Red Hat
Red Hat Satellite 6
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in Red Hat Hardened Images involves the Katello Docker Tags repositories API not properly enforcing organization scoping when listing repositories for a Docker meta tag. An authenticated user authorized to view products in one organization can supply a Docker tag identifier to retrieve repository metadata associated with Docker tags from a different organization. This improper access control results in unauthorized disclosure of repository configuration information across organization boundaries.
Potential Impact
The impact is limited to unauthorized disclosure of repository metadata across organizations. There is no indication of integrity or availability impact. The vulnerability requires authenticated user privileges with permission to view products in at least one organization. The confidentiality impact is low, as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-107444 for current remediation guidance. No specific patch or workaround information is provided in the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-10-08T03:29:12.521Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-107444","vendor":"Red Hat"}]
Threat ID: 6ac716252cdf04f656de3796
Added to database: 10/08/2026, 04:03:49 UTC
Last enriched: 10/08/2026, 04:18:30 UTC
Last updated: 10/08/2026, 04:18:56 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.