CVE-2026-85747— Distribution: Client `manifests.Get()` does not verify returned content against requested digest
Quick assessment
Affected
distribution distribution
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Distribution 是一套用于打包、分发、存储和交付容器内容的工具包。在版本 3.1.2 之前， 方法在处理以 digest（摘要）为锚点的请求时，会接收返回的 manifest（清单文件），并直接将其传递给 进行解析，而未将 manifest 内容与请求的 digest 进行哈希校验。这一缺陷使得攻击者或中间人可以通过伪造或拦截注册表（registry）的响应，在即使 头部声称与请求的 digest 一致的情况下，仍替换为攻击者指定的恶意 manifest 内容。此外， 中集成的 pull-through
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| distribution | distribution | < 3.1.2 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85747
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Distribution: Client `manifests.Get()` does not verify returned content against requested digest
Source: CVE Program / CVE List V5
Vulnerability Description
Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
完整性检查值验证不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| distribution | distribution | < 3.1.2 | - |
|
II. Public POCs for CVE-2026-85747
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85747
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-85747 (1)
Vendor Advisories for CVE-2026-85747 (1)
Other References for CVE-2026-85747 (1)
-
🔗 Release v3.1.2 · distribution/distribution · GitHub x_refsource_MISC
IV. Related Vulnerabilities
Same product: distribution
-
CVE-2026-41888
Distribution: Tag deletion bypasses `storage.delete.enabled` -
CVE-2026-35172
Distribution has stale blob access resurrection via repo-sco -
CVE-2026-33540
Distribution affected by pull-through cache credential exfil -
CVE-2025-24976
Distribution's token authentication allows attacker to injec
Same vendor: distribution
-
CVE-2026-41888
Distribution: Tag deletion bypasses `storage.delete.enabled` -
CVE-2026-35172
Distribution has stale blob access resurrection via repo-sco -
CVE-2026-33540
Distribution affected by pull-through cache credential exfil -
CVE-2025-24976
Distribution's token authentication allows attacker to injec
Same weakness: CWE-354
-
CVE-2026-109366
Zebra before 6.4.0 Gossiped Block Drop via Forged Coinbase s -
CVE-2026-105280
Hex writes unverified package tarballs to standard output in -
CVE-2026-106434
Unrecognized payload acceptance in explicit decryption in Mo -
CVE-2026-84900
HP ThinPro 8.1 SP10 and ThinPro 9 SP3 Security Updates -
CVE-2026-93318
Cache poisoning via unvalidated image layer DiffIDs
V. Comments for CVE-2026-85747
No comments yet