CVE-2026-16487

A flaw in bootc (part of containers-common ) allows automatic or manual upgrades of mutable image tags to apply unsigned content when using the default containers signature policy. This occurs because certain registries fall through to the insecureAcceptAnything policy. An attacker capable of upd...