TI-2025-13017 Aliases CVE-2025-14243 GHSA-v9gq-365f-qxxw

Mirror-registry: openshift mirror registry: user enumeration via authentication error messages

LOW 30CWE-209Published 2026-04-08 · Updated 2026-04-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-209.

Summary

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00292 21st percentileScored 2026-11-07

Fix Will not fix Red Hat: no fix planned

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Red Hat	mirror registry for Red Hat OpenShift	—	—	No fix listed	CNA
Red Hat	mirror registry for Red Hat OpenShift 2	—	—	No fix listed	CNA

mirror registry for Red Hat OpenShift VendorRed Hat Affected — Fixed in — No fix listed CNA
mirror registry for Red Hat OpenShift 2 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:redhat:mirror_registry_for_red_hat_openshift:-:::::::*	not specified by NVD	Vulnerable	Red Hat
cpe:2.3:a:redhat:mirror_registry_for_red_hat_openshift:2.0:::::::*	2.0	Vulnerable	Red Hat

cpe:2.3:a:redhat:mirror_registry_for_red_hat_openshift:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
cpe:2.3:a:redhat:mirror_registry_for_red_hat_openshift:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
mirror registry for Red Hat OpenShift	Affected	No fix planned: Will not fix
mirror registry for Red Hat OpenShift 2	Affected	No fix planned: Will not fix

Timeline

2026-10-02 Threatist record created from CVE-2025-14243
2026-10-03 Alias added: GHSA-v9gq-365f-qxxw

References

Advisory 2

TI-2026-25101 Mirror-registry: remote code execution using pickle deserialization CVSS 3.1HIGH 8.8
TI-2026-25100 Mirror-registry: quay: insecure direct object reference in blobupload CVSS 3.1HIGH 7.4
TI-2026-02012 Mirror-registry: quay: quay: server-side request forgery via log export functionality CVSS 3.1MEDIUM 6.5
TI-2026-25102 Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences