CVE-2022-46463: Linuxfoundation Harbor

High severity, CVSS 7.5. EPSS: 6.2% chance of exploitation in the next 30 days.

An access control issue in Harbor v1.X.X to v2.5.3 allows attackers to access public and private image repositories without authentication. NOTE: the vendor's position is that this "is clearly described in the documentation as a feature."

Affected products

• Linuxfoundation Harbor: from 1.1.0, up to and including 2.5.3

Published 2023-01-13. Last modified 2026-06-17.