Information Disclosure in Quay by Red Hat Due to Improper Namespace Scoping
CVE-2026-109195

3.1LOW

Key Information:

Vendor

Red Hat
Status
Red Hat Quay 3
Vendor
CVE Published:
12 October 2026

What is CVE-2026-109195?

A vulnerability has been identified in Quay that allows an authenticated attacker to access repository auto-prune configurations from other namespaces. This security flaw arises due to the application's failure to correctly enforce namespace scoping while retrieving policy details based on repository names and policy identifiers. To take advantage of this flaw, an attacker must operate a repository that shares the same name as the target and possess knowledge of the target policy's unique identifier, potentially leading to unauthorized information access.

References

https://access.redhat.com/security/cve/CVE-2026-109195
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2549646
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Xanlar Agamalizade for reporting this issue.
.