https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:10:47.216904+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07972 bdu:2026-07972 2026-10-02T14:10:47.340394+00:00 bdu:2026-07972 https://cve.radiocsirt.org/vuln/bit-distribution-2026-41888 BIT-distribution-2026-41888 — Distribution: Tag deletion bypasses `storage.delete.enabled` configuration 2026-10-02T14:10:47.340439+00:00

Affected: Bitnami: distribution

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.

 https://cve.radiocsirt.org/vuln/euvd-2026-318611 EUVD-2026-318611 2026-10-02T14:10:47.340489+00:00 EUVD-2026-318611 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41888 fkie_cve-2026-41888 2026-10-02T14:10:47.340510+00:00

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.

 https://cve.radiocsirt.org/vuln/ghsa-6pjf-3r9x-m592 GHSA-6pjf-3r9x-m592 — Distribution's tag deletion bypasses `storage.delete.enabled` configuration 2026-10-02T14:10:47.340547+00:00

Affected: Go: github.com/distribution/distribution/v3, Go: github.com/distribution/distribution

### Summary

Tag deletion via the `DELETE /v2/<name>/manifests/<tag>` endpoint bypasses the `storage.delete.enabled: false` configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion.

### Details

When `storage.delete.enabled` is configured to false, digest-based manifest deletion is correctly rejected by the guard in [registry/storage/linkedblobstore.go:212-215](https://github.com/distribution/distribution/blob/main/registry/storage/linkedblobstore.go#L213-L215).

However, tag deletion takes a separate code path that never checks this setting:

In [`registry/handlers/manifests.go:439-453`](https://github.com/distribution/distribution/blob/main/registry/handlers/manifests.go#L439-L453), `DeleteManifest` detects a tag reference, calls `tagService.Untag()`, returns, never consulting `registry.deleteEnabled`.

In turn, [`tagStore.Untag()`](https://github.com/distribution/distribution/blob/main/registry/storage/tagstore.go#L111-L121) calls the storage driver directly to delete the tag path without checking whether deletes are enabled.

### PoC

Using a paired down Distribution configuration that explicitly disables deletes, such as this one, stored as `config.yaml`:

```yaml version: 0.1 storage: delete: enabled: false filesystem: rootdirectory: /var/lib/registry http: addr: :5000 ```

Start a local Distribution, mounting in the above configuration from the current directory:

```shell docker…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10812-1 openSUSE-SU-2026:10812-1 — distribution-registry-3.1.1-1.1 on GA media 2026-10-02T14:10:47.340652+00:00

distribution-registry-3.1.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:21881-1 SUSE-SU-2026:21881-1 — Security update for helm 2026-10-02T14:10:47.340679+00:00

Security update for helm

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-41888 UBUNTU-CVE-2026-41888 2026-10-02T14:10:47.340704+00:00

Affected: Ubuntu:Pro:16.04:LTS: docker-registry, Ubuntu:Pro:18.04:LTS: docker-registry, Ubuntu:20.04:LTS: docker-registry, Ubuntu:Pro:22.04:LTS: docker-registry, Ubuntu:24.04:LTS: docker-registry, Ubuntu:25.10: docker-registry, Ubuntu:Pro:26.04:LTS: docker-registry

Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.1, tag deletion via the DELETE /v2/<name>/manifests/<tag> endpoint bypasses the storage.delete.enabled: false configuration, allowing any API client to remove tags from repositories even when the operator has explicitly disabled deletion. This vulnerability is fixed in 3.1.1.