CVE-2026-24845

CVE-2026-24845 describes a vulnerability in Chainguard malcontent versions 0.10.0 through 1.20.2, where scanning a specially crafted OCI image reference could expose Docker registry credentials. A malicious registry could redirect token authentication to an attacker-controlled endpoint via a WWW-Authenticate header, leading to credential leakage. This medium-severity vulnerability (CVSS 6.5) has a network attack vector and low attack complexity, requiring user interaction (scanning the malicious image). The primary impact is high confidentiality compromise, as credentials could be stolen. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, with only one mention and one article identified.