Skip to content
OpenAdvisories
Medium · 6.8 CVE-2026-85747 BIT-distribution-2026-85747EUVD-2026-99225GHSA-685w-q87j-wqw3GO-2026-6778

Distribution: Client `manifests.Get()` does not verify returned content against requested digest

Published Oct 13, 2026 · Updated Oct 18, 2026 · Assigned by GitHub_M

Vendor: distribution Product: distribution Package: argo-workflow-controller-4.0 Package: argocd-image-updater Package: dagdotdev Package: datadog-agent-7.78 Package: datadog-agent-7.79 Package: docker-registry Package: docker-registry Package: dockerd-28 Package: dockerd-29 Package: flux-2.7 Package: flux-2.8 Package: github.com/distribution/distribution Package: github.com/distribution/distribution/v3 Package: github.com/docker/distribution Package: gitlab-runner-19.2 Package: gitlab-runner-helper-19.2 Package: gitness Package: incert Package: k3d Package: k3s-1.32 Package: k3s-static-1.32 Package: kbld Package: knative-serving-1.21-controller Package: kots Package: kubescape Package: kubescape-operator Package: kwokctl Package: manifest-tool Package: neuvector-scanner Package: neuvector-scanner-task Package: paranoia Package: podman-6.0 Package: portieris Package: rancher-system-agent Package: ratify Package: ratify-licensechecker Package: ratify-sbom Package: ratify-schemavalidator Package: ratify-vulnerabilityreport Package: skaffold Package: snyk-cli Package: undock Package: vcluster Package: vcluster-cli Package: vcluster-syncer Package: vendir Package: vitess-23-binaries Package: xeol Ecosystem: Debian Ecosystem: Go Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.

Affected products

VendorProductAffectedFixed
distribution distribution < 3.1.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 docker-registry No fix yet —
Debian 13 docker-registry No fix yet —
Debian 12 docker-registry No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 26.10 docker-registry No fix yet —
Ubuntu 24.04 LTS docker-registry No fix yet —
Ubuntu 20.04 LTS docker-registry No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 26.04 LTS docker-registry No fix yet —
Ubuntu Pro 22.04 LTS docker-registry No fix yet —
Ubuntu Pro 18.04 LTS docker-registry No fix yet —
Ubuntu Pro 16.04 LTS docker-registry No fix yet —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling argocd-image-updater 1.3.1-r3 —
Wolfi rolling gitness 3.3.0-r46 —
Wolfi rolling k3d +38 No fix yet —
Wolfi rolling kots 1.132.0-r6 —
Wolfi rolling kubescape-operator 0.2.220-r0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/distribution/distribution all versions — GO-2026-6778
Go github.com/distribution/distribution/v3 < 3.1.2 3.1.2 GHSA-685w-q87j-wqw3
Go github.com/docker/distribution <= 2.8.3 — GHSA-685w-q87j-wqw3
Go github.com/docker/distribution all versions — GO-2026-6778

References