Unauthorized Access Vulnerability in Red Hat Quay
CVE-2026-123710

9.8CRITICAL

Key Information:

Vendor

Red Hat
Status
Red Hat Quay 3
Red Hat Quay 5
Vendor
CVE Published:
11 November 2026

What is CVE-2026-123710?

A security flaw exists in Red Hat Quay where an unauthenticated client can gain unauthorized access by obtaining an anonymous registry token. This token can be presented to the service key rotation endpoint, allowing the client to install a self-approved signing key without expiry. Tokens signed with this key grant the client read and write permissions to any repository, including the ability to manipulate private images and modify repository tags. This vulnerability underscores the importance of tightening access controls and verifying token requests in container management systems.

References

https://access.redhat.com/security/cve/CVE-2026-123710
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2568072
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

This issue was discovered by Dave O'Connor (Red Hat).
.