CVE-2025-27403

Ratify is a verification engine as a binary executable and on Kubernetes which enables verification of artifact security metadata and admits for deployment only those that comply with policies the user creates. In a Kubernetes environment, Ratify can be configured to authenticate to a private Azure Container Registry (ACR). The Azure workload identity and Azure managed identity authentication providers are configured in this setup. Users that configure a private ACR to be used with the Azure authentication providers may be impacted by a vulnerability that exists in versions prior to 1.2.3 and 1.3.2. Both Azure authentication providers attempt to exchange an Entra ID (EID) token for an ACR refresh token. However, Ratify’s Azure authentication providers did not verify that the target registry is an ACR. This could have led to the EID token being presented to a non-ACR registry during token exchange. EID tokens with ACR access can potentially be extracted and abused if a user workload contains an image reference to a malicious registry. As of versions 1.2.3 and 1.3.2, the Azure workload identity and Azure managed identity authentication providers are updated to add new validation prior to EID token exchange. Validation relies upon registry domain validation against a pre-configured list of well-known ACR endpoints. EID token exchange will be executed only if at least one of the configured well-known domain suffixes (wildcard support included) matches the registry domain of the image reference.

• CWE-287

• https://github.com/ratify-project/ratify/commit/0ec0c08490e3d672ae64b1a220c90d5484f1c93f
• https://github.com/ratify-project/ratify/commit/84c7c48fa76bb9a1c9583635d1e90bc25b1a546c
• https://github.com/ratify-project/ratify/security/advisories/GHSA-44f7-5fj5-h4px

Published

Mar 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27398A vulnerability has been identified in SCALANCE LPE9403 (6GK…2.7
• CVE-2025-27399Mastodon is a self-hosted, federated microblogging platform.…5.3
• CVE-2025-2740A vulnerability classified as critical has been found in PHP…7.3
• CVE-2025-27400Magento Long Term Support (LTS) is an unofficial, community-…2.9
• CVE-2025-27401Tuleap is an Open Source Suite to improve management of soft…4.6
• CVE-2025-27402Tuleap is an Open Source Suite to improve management of soft…4.6
• CVE-2025-27404Icinga Web 2 is an open source monitoring web interface, fra…6.1
• CVE-2025-27405Icinga Web 2 is an open source monitoring web interface, fra…6.1
• CVE-2025-27406Icinga Reporting is the central component for reporting rela…7.6
• CVE-2025-27407graphql-ruby is a Ruby implementation of GraphQL. Starting i…9
• CVE-2025-27408Manifest offers users a one-file micro back end. Prior to ve…4.8
• CVE-2025-27409Joplin is a free, open source note taking and to-do applicat…7.5