๐Ÿ” CVE Alert

CVE-2026-65388

HIGH 7.5
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.

Vendor apple
Product containerization
Ecosystems
Industries
Technology
Published Sep 16, 2026
Last Updated Sep 17, 2026
Stay Ahead of the Next One

Get instant alerts for apple containerization

Be the first to know when new high vulnerabilities affecting apple containerization are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Apple / containerization
0 < 0.41.0

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
github.com: https://github.com/apple/containerization/security/advisories/GHSA-mx96-5vvg-x2mg