ZoomEye finds 57,029 exposed Harbor registries online

ZoomEye discovered 57,029 services presenting a Harbor fingerprint, the open source container registry with RBAC and image scanning. An exposed registry is a deployment risk not only because images can be read, but because an unauthenticated push to a trusted project can run code inside the estate.

• Query app="Harbor" on 2026-09-27 returned 57,029 matching services
• A public project exposes images and environment variables baked into layers
• A long-lived robot account scoped to multiple projects widens a leak
• Reviewers should disable anonymous access and enforce TLS