CVE-2026-85747: Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for…

PriorityP336medium6.8CVSS 3.1

AVNACHPRNUINSCCNIHAN

EPSS

0.22%

12.1th percentile

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client.(*manifests).Get() reads a manifest returned for a digest-pinned request and passes it to distribution.UnmarshalManifest without hashing the body against the requested digest, allowing a malicious or intercepted registry response to substitute attacker-chosen manifest content even when Docker-Content-Digest claims the requested value. The bundled pull-through proxy in registry/proxy/proxymanifeststore.go can cache and re-serve the substituted manifest. This issue is fixed in version 3.1.2.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
distribution	distribution	< 3.1.2	3.1.2
github.com	distribution_distribution_v3	>= 0 < 3.1.2	3.1.2
github.com	docker_distribution	0 – 2.8.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.