https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T11:00:18.533149+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-harbor-2022-31671 BIT-harbor-2022-31671 — Harbor fails to validate the user permissions when reading and updating job execution logs through the P2P preheat exec… 2026-10-17T11:00:18.535914+00:00

Affected: Bitnami: harbor

Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs stored in the Harbor database.

 https://cve.radiocsirt.org/vuln/euvd-2026-201513 EUVD-2026-201513 2026-10-17T11:00:18.535974+00:00 EUVD-2026-201513 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31671 fkie_cve-2022-31671 2026-10-17T11:00:18.535991+00:00

Harbor fails to validate user permissions when reading and updating job execution logs through the P2P preheat execution logs. By sending a request that attempts to read/update P2P preheat execution logs and specifying different job IDs, malicious authenticated users could read all the job logs stored in the Harbor database.

 https://cve.radiocsirt.org/vuln/ghsa-q76q-q8hw-hmpw GHSA-q76q-q8hw-hmpw — Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs 2026-10-17T11:00:18.536014+00:00

Affected: Go: github.com/goharbor/harbor

### Impact Harbor fails to validate the user permissions when reading job execution logs through the P2P preheat execution logs - API call

GET /projects/{project_name}/preheat/policies/{preheat_policy_name}/executions/{execution_id}/tasks/{task_id}/logs

By sending a request that attempts to read P2P preheat execution logs and specifying different job ids, malicious authenticatedusers could read all the job logs stored in the Harbor database.

### Patches This and similar issues are fixed in Harbor v2.5.2 and later. Please upgrade as soon as possible.

### Workarounds There are no workarounds available.

### For more information If you have any questions or comments about this advisory: * Open an issue in [the Harbor GitHub repository](https://github.com/goharbor/harbor)

### Credits Thanks to [Gal Goldstein](https://www.linkedin.com/in/gal-goldshtein/) and [Daniel Abeles](https://www.linkedin.com/in/daniel-abeles/) from [Oxeye Security](https://www.oxeye.io/) for reporting this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-31671 gsd-2022-31671 2026-10-17T11:00:18.536047+00:00 gsd-2022-31671