CVE-2026-107444: Rubygem-katello: katello docker tags repositories api cross-organization authorization bypass
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrieve repository metadata associated with Docker tags belonging to another organization by supplying the tag identifier. This can result in unauthorized disclosure of repository configuration information across organization boundaries.
Other sources
A flaw was found in Katello. The Docker Tags repositories API endpoint resolves a DockerMetaTag with an unscoped find and returns associated repositories without intersecting Repository.readable. An authenticated user with viewproducts permission in one organization can enumerate repository metadata (names, product associations, content types, upstream URLs) for Docker tags belonging to other organizations by supplying the tag identifier and omitting the optional organization filter. Reported via PSIRTSUPT-25120.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An authenticated user who has permission to view products in one organization can exploit it. The user does not need access to the organization whose Docker tag repository metadata is disclosed.
What information could be exposed?
The issue can disclose repository metadata associated with Docker tags in other organizations, including repository names, product associations, content types, and upstream URLs. The provided information does not indicate that repository contents or write access are exposed.
What request condition triggers the authorization bypass?
The user supplies the identifier of a Docker meta tag belonging to another organization and omits the optional organization filter. The affected API resolves the tag without organization scoping and does not limit returned repositories to those the requester can read.