Access Control Flaw in Quay Affects User Permissions
CVE-2026-18255

7.2HIGH

Key Information:

Vendor

Red Hat
Status
Red Hat Quay 3.10
Red Hat Quay 3.12
Red Hat Quay 3.15
Red Hat Quay 3.9
Vendor
CVE Published:
29 July 2026

What is CVE-2026-18255?

A serious flaw in Quay allows users designated as GLOBAL_READONLY_SUPER_USERS to access robot account tokens for repositories they lack membership in. This flaw grants an attacker with read-only superuser privileges the ability to impersonate any robot account, posing significant risks to repository security and data confidentiality. Immediate measures should be taken to review user permissions and secure sensitive tokens.

Affected Version(s)

Red Hat Quay 3.10 1788561841

Red Hat Quay 3.12 1788594376

Red Hat Quay 3.15 1788191755

References

https://access.redhat.com/errata/RHSA-2026:63307
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:65514
vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:66084
vendor-advisoryx_refsource_REDHAT

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.