Skip to content
OpenAdvisories
Low · 2.1 CVE-2026-48978 EUVD-2026-45295GHSA-xf85-363p-868wGO-2026-5885

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

Published Jul 17, 2026 · Updated Jul 21, 2026 · Assigned by GitHub_M

Vendor: oras-project Product: oras-go Package: argo-cd-3.2 Package: argo-cd-3.2-compat Package: argo-cd-3.3 Package: argo-cd-3.3-compat Package: argo-cd-3.4 Package: argo-cd-3.4-compat Package: argocd-image-updater Package: cert-manager-cmctl Package: chartmuseum Package: cilium-cli Package: cluster-api-helm-controller Package: conftest Package: consul-k8s-1.9-cli Package: eksctl Package: falcoctl Package: gatekeeper-3.22-gator Package: gitness Package: gogatekeeper Package: golang-oras-oras-go Package: golang-oras-oras-go Package: headlamp Package: helm-3 Package: helm-mapkubeapis Package: helm-operator Package: helm-push Package: helm-set-status Package: k8sgpt Package: k8ssandra-client Package: k9s Package: kargo Package: kots Package: kube-arangodb-1.4 Package: kubescape Package: kubescape-operator Package: kubevela-vela-cli Package: kubevela-vela-core Package: kyverno-1.17 Package: kyverno-1.18 Package: kyverno-background-controller-1.17 Package: kyverno-background-controller-1.18 Package: kyverno-cleanup-controller-1.17 Package: kyverno-cleanup-controller-1.18 Package: kyverno-cli-1.17 Package: kyverno-cli-1.18 Package: kyverno-init-container-1.17 Package: kyverno-init-container-1.18 Package: kyverno-notation-aws Package: kyverno-reports-controller-1.17 Package: kyverno-reports-controller-1.18 Package: linkerd2-cli Package: linkerd2-controller Package: linkerd2-controller-compat Package: linkerd2-debug Package: linkerd2-metrics-api Package: linkerd2-tap Package: linkerd2-web Package: manifest-tool Package: maru Package: opentofu-1.11 Package: opentofu-1.12 Package: opentofu-1.12-compat Package: oras Package: oras.land/oras-go Package: oras.land/oras-go/v2 Package: rancher-2.13 Package: rancher-2.14 Package: rancher-agent-2.13 Package: rancher-agent-2.14 Package: rancher-fleet Package: rancher-fleet-agent Package: rancher-fleet-cli Package: rancher-fleet-controller Package: rancher-helm-3 Package: ratify Package: ratify-licensechecker Package: ratify-licensechecker-compat Package: ratify-sbom Package: ratify-schemavalidator Package: ratify-vulnerabilityreport Package: steampipe Package: teleport-18.6 Package: tigera-operator-1.42 Package: trivy Package: trivy-operator Package: tw Package: twt Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: xeol Package: zarf Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client follows the realm URL from a registry's WWW-Authenticate: Bearer challenge without validating the scheme or host, allowing a malicious or compromised registry to cause SSRF to internal networks such as http://169.254.169.254/, http://10.0.0.x/, and http://127.0.0.1/, or to downgrade a registry contacted over https:// to an http:// token endpoint in registry/remote/auth/client.go through Client.Do(), Client.fetchBearerToken(), fetchDistributionToken, and fetchOAuth2Token. This issue is fixed in version 2.6.1.

Affected products

VendorProductAffectedFixed
oras-project oras-go < 2.6.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 golang-oras-oras-go 2.6.2-1 —
Debian 13 golang-oras-oras-go No fix yet —
Debian 12 golang-oras-oras-go No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 golang-oras-oras-go No fix yet —
Ubuntu 26.04 LTS golang-oras-oras-go No fix yet —
Ubuntu 24.04 LTS golang-oras-oras-go No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLES 15 SP6 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLES 15 SP5 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLES 15 SP4 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
Show 11 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 16.0 govulncheck-vulndb 0.0.20260727T201416-160000.1.1 SUSE-SU-2026:23227-1, SUSE-SU-2026:23216-1
SLES for SAP 16.0 helm 3.21.2-160000.2.2 SUSE-SU-2026:23984-1, SUSE-SU-2026:23688-1, SUSE-SU-2026:22650-1
SLES for SAP 15 SP6 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLES for SAP 15 SP5 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLES for SAP 15 SP4 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLES 16.0 govulncheck-vulndb 0.0.20260727T201416-160000.1.1 SUSE-SU-2026:23227-1, SUSE-SU-2026:23216-1
SLES 16.0 helm 3.21.2-160000.2.2 SUSE-SU-2026:23984-1, SUSE-SU-2026:23688-1, SUSE-SU-2026:22650-1
SLE Micro 6.2 c-ares 1.34.8-160000.1.1 SUSE-SU-2026:23456-1
SLE Micro 6.2 helm 3.21.2-160000.2.2 SUSE-SU-2026:23973-1, SUSE-SU-2026:23506-1, SUSE-SU-2026:22603-1
SLE Micro 6.1 helm 3.21.3-slfo.1.1_1.1 SUSE-SU-2026:24282-1, SUSE-SU-2026:23522-1, SUSE-SU-2026:23162-1
SLE Micro 6.0 helm 3.21.3-1.1 SUSE-SU-2026:23456-1, SUSE-SU-2026:23052-1
SLE Micro 5.5 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLE HPC 15 SP5 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1
SLE HPC 15 SP4 helm 3.21.2-150000.1.80.1 SUSE-SU-2026:2823-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed helm 4.2.2-2.1 openSUSE-SU-2026:11186-1
openSUSE Tumbleweed helm3 3.21.2-2.1 openSUSE-SU-2026:11187-1
openSUSE Leap 16.0 govulncheck-vulndb 0.0.20260727T201416-160000.1.1 openSUSE-SU-2026:21551-1
openSUSE Leap 16.0 helm 3.21.2-160000.2.1 openSUSE-SU-2026:21983-1, openSUSE-SU-2026:21809-1, openSUSE-SU-2026:21331-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2023 soci-snapshotter 0.16.0-1.amzn2023.0.1 ALAS2023-2026-3153

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling argo-cd-3.2 +1 3.2.12-r5 —
Wolfi rolling argo-cd-3.3 3.3.12-r3 —
Wolfi rolling argo-cd-3.3-compat 3.3.14-r9 —
Wolfi rolling argo-cd-3.4 +1 3.4.4-r2 —
Wolfi rolling argocd-image-updater 1.2.2-r2 —
Wolfi rolling cert-manager-cmctl 2.5.0-r9 —
Wolfi rolling chartmuseum 0.16.5-r16 —
Wolfi rolling cilium-cli 0.19.5-r1 —
Wolfi rolling cluster-api-helm-controller 0.6.4-r9 —
Wolfi rolling conftest 0.68.2-r5 —
Wolfi rolling consul-k8s-1.9-cli 1.9.9-r1 —
Wolfi rolling eksctl 0.229.0-r1 —
Wolfi rolling falcoctl 0.13.0-r10 —
Wolfi rolling gatekeeper-3.22-gator 3.22.2-r7 —
Wolfi rolling gitness 3.3.0-r25 —
Wolfi rolling gogatekeeper 4.10.0-r2 —
Wolfi rolling headlamp 0.43.0-r3 —
Wolfi rolling helm-3 3.22.0-r0 —
Wolfi rolling helm-mapkubeapis 0.6.1-r22 —
Wolfi rolling helm-operator +1 1.42.3-r1 —
Wolfi rolling helm-push 0.11.1-r17 —
Wolfi rolling helm-set-status 0.3.0-r22 —
Wolfi rolling k8sgpt 0.4.36-r1 —
Wolfi rolling k8ssandra-client 0.8.14-r2 —
Wolfi rolling k9s 0.51.0-r5 —
Wolfi rolling kargo 1.10.8-r2 —
Wolfi rolling kots 1.130.6-r2 —
Wolfi rolling kube-arangodb-1.4 1.4.3-r14 —
Wolfi rolling kubescape 4.0.10-r3 —
Wolfi rolling kubescape-operator 0.2.151-r4 —
Wolfi rolling kubevela-vela-cli +1 No fix yet —
Wolfi rolling kyverno-1.17 1.17.2-r35 —
Wolfi rolling kyverno-1.18 +5 1.18.1-r11 —
Wolfi rolling kyverno-cli-1.17 +4 1.17.2-r17 —
Wolfi rolling kyverno-notation-aws 1.1-r65 —
Wolfi rolling linkerd2-cli +4 26.6.3-r3 —
Wolfi rolling linkerd2-debug +1 26.9.2-r0 —
Wolfi rolling manifest-tool 2.2.2-r6 —
Wolfi rolling maru 0.6.0-r18 —
Wolfi rolling opentofu-1.11 1.11.11-r2 —
Wolfi rolling opentofu-1.12 1.12.3-r2 —
Wolfi rolling opentofu-1.12-compat 1.12.6-r6 —
Wolfi rolling oras 1.3.2-r6 —
Wolfi rolling rancher-2.13 +1 2.13.7-r1 —
Wolfi rolling rancher-2.14 2.14.3-r2 —
Wolfi rolling rancher-agent-2.14 2.14.3-r1 —
Wolfi rolling rancher-fleet 0.16.1-r3 —
Wolfi rolling rancher-fleet-cli +2 0.15.4-r2 —
Wolfi rolling rancher-helm-3 3.20.0-r16 —
Wolfi rolling ratify +4 1.4.0-r38 —
Wolfi rolling ratify-licensechecker-compat 1.4.5-r4 —
Wolfi rolling steampipe 2.4.4-r8 —
Wolfi rolling teleport-18.6 18.6.8-r31 —
Wolfi rolling trivy 0.72.0-r2 —
Wolfi rolling trivy-operator 0.30.1-r23 —
Wolfi rolling tw +1 0.0.50-r1 —
Wolfi rolling vcluster +2 0.35.1-r3 —
Wolfi rolling xeol 0.10.8-r48 —
Wolfi rolling zarf 0.80.0-r4 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go oras.land/oras-go <= 1.2.7 — GHSA-xf85-363p-868w
Go oras.land/oras-go/v2 < 2.6.1 2.6.1 GHSA-xf85-363p-868w

Advisories 21

References