PT-2026-72131

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description A flaw in the exported logs feature allows an unauthenticated attacker to download exported action logs without proper authorization if they possess a valid file ID. Although these IDs a...

CVE-2026-74240: Improper Authentication

A flaw was found in Red Hat Quay's JWT JSON Web Token validation for federated robot accounts and single sign-on SSO authentication. Multiple issues related to audience verification and the enforcement of azp and sub claims were identified. These flaws could allow an attacker with a validly-signe...

CVE-2026-74245: Missing Authentication for Critical Function

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to...

CVE-2026-74244: Improper Verification of Cryptographic Signature

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the /webhooks/stripe endpoint without validating the Stripe-Signature header. Successful exploitation can lead to th...

CVE-2026-74242: Authorization Bypass Through User-Controlled Key

A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...

PT-2026-72128

Name of the Vulnerable Software and Affected Versions Red Hat Quay affected versions not specified Description An Insecure Direct Object Reference IDOR exists where a repository administrator can access notification configurations of other repositories by knowing or guessing the Universally Uniqu...

Important: Red Hat Security Advisory: Red Hat Quay 3.17.4

Red Hat Quay 3.17.4 is now available with bug fixes. Quay 3.17.4...

Important: Red Hat Security Advisory: Red Hat Quay 3.10.25

Red Hat Quay 3.10.25 is now available with bug fixes. Quay 3.10.25...

Important: Red Hat Security Advisory: Red Hat Quay 3.12.21

Red Hat Quay 3.12.21 is now available with bug fixes. Quay 3.12.21...

Important: Red Hat Security Advisory: Red Hat Quay 3.9.25

Red Hat Quay 3.9.25 is now available with bug fixes. Quay 3.9.25...

Important: Red Hat Security Advisory: Red Hat Quay 3.15.7

Red Hat Quay 3.15.7 is now available with bug fixes. Quay 3.15.7...

Important: Red Hat Security Advisory: Red Hat Quay 3.18.0

Red Hat Quay 3.18.0 is now available with bug fixes and feature enhancements. Quay 3.18.0...

CVE-2026-18255

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...

CVE-2026-18255

CVE-2026-18255 is a vulnerability in Quay where a user in the GLOBAL_READONLY_SUPER_USERS group can view robot account tokens for repositories they are not a member of, enabling impersonation of robot accounts. Affected component: Quay’s handling of robot account tokens; root cause: token visibil...

EUVD-2026-50411

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...

CVE-2026-18255 Quay: quay: global read-only superuser can view robot account tokens

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...

CVE-2026-18255

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...

CVE-2026-18255 Quay: quay: global read-only superuser can view robot account tokens

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...

CVE-2026-18255

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account...

CVE-2026-18255

A flaw was found in Quay. A user configured in GLOBALREADONLYSUPERUSERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account. Mitigation Remove users who can not be trusted with...