GPU VulnDB

Database/Control plane, storage & DevOps

Renovate: Docker datasource follows cross-origin Link pagination and sends registry credentials to the attacker's host

CVSS 9.2CVE-2026-88887Control plane, storage & DevOpscurated

Impact

When Renovate lists tags or digests for a container image it follows the registry's HTTP Link header to the next page and re-attaches the configured registry credentials without checking that the next URL is the same origin. A malicious or compromised registry can therefore redirect the credentialed request to a host of its choosing. Those are usually pull - and sometimes push - credentials for the registry that holds your CUDA base images, model-serving images and internal training images; a leaked push credential is an image-supply-chain problem for every GPU node that pulls from it. Renovate runs self-hosted in many clusters (CE/EE images and Helm charts), so this is a bot on your control plane handing out its own secrets. Exploitation requires that Renovate already talks to the bad registry, which it did on the initial request too - the new capability is delivering the credentials to an additional, attacker-chosen host.

Who can reach it

An operator of a container registry that your Renovate instance is already configured to query, or anyone who has compromised one. No access to your cluster or authentication against it is needed - only control of a registry response.

What to do

Upgrade to Renovate 44.11.2 (npm package or renovate/renovate image), Mend Renovate CE/EE 15.4.0, or mend-renovate-enterprise-edition Helm chart 10.4.0, then redeploy the bot - a pod or daemon restart, no node work. Do not set RENOVATE_X_DOCKER_PAGINATION_ALLOW_CROSS_ORIGIN, which restores the vulnerable behaviour. Rotate registry credentials that Renovate held if you use third-party or shared registries.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-88887https://github.com/renovatebot/renovate/security/advisories/GHSA-v73q-hvqx-hxwxhttps://www.vulncheck.com/advisories/renovate-before-44.11.2-credential-exfiltration-via-link-header-2

Related entries

All Control plane, storage & DevOps entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.