CVE-2026-28909_CVE-2026-28909

6.5 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.

Basic Information

ID CVE-2026-28909

Source apple

Published Apr 30, 2026 at 22:00

Modified May 1, 2026 at 13:57

Affected Product

Vendor Apple

Product macOS

Version 0.12.1

Affected Versions Apple macOS 0.12.1

CWE Classification

CWE-522

References

github.com /apple/container/security/advisories/GHSA-m5rp-xcpf-r8m7

{
    "lastseen": "",
    "description": "Users who connect to malicious registries with hostnames matching the bypass patterns will have their registry credentials exposed in plaintext. This issue is fixed in container version 0.12.3.",
    "published": "2026-04-30T22:00:01.545Z",
    "modified": "2026-05-01T13:57:11.662Z",
    "type": "cve",
    "title": "CVE-2026-28909",
    "source": "apple",
    "references": "https://github.com/apple/container/security/advisories/GHSA-m5rp-xcpf-r8m7",
    "id": "CVE-2026-28909",
    "bulletinFamily": "",
    "cwe": [
        "CWE-522"
    ],
    "cvelist": null,
    "sourceData": "Apple macOS 0.12.1",
    "sourceHref": "",
    "cvss": {
        "score": 6.5,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "macOS",
    "version": "0.12.1",
    "vendor": "Apple",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}