A flaw was found in the OpenShift Mirror Registry.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 8, 2026 · NIST NVD

   Detected

   A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

2. Jul 25, 2026 · NIST NVD

   Updated

   A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

Affected

• cpe redhat/mirror registry for red hat openshiftversion unspecified
• cpe redhat/mirror registry for red hat openshift2.0

Sources

• CVE.orgVulnerability recordCVE-2025-14243

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2025-14243

  A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation.

  nvd.nist.gov

References

• Vendor Advisory · access.redhat.com
• Issue Tracking · bugzilla.redhat.com