Proxy Cache Configuration Flaw in Red Hat Quay

CVE-2026-32591

What is CVE-2026-32591?

A vulnerability exists in Red Hat Quay related to the Proxy Cache configuration feature. When administrators set up an upstream registry for proxy caching, the application establishes a network connection to the designated hostname without validating its legitimacy. This flaw allows attackers with organization administrator privileges to exploit the system by supplying a malicious hostname. Consequently, the Quay server may inadvertently interact with internal network services or unauthorized cloud infrastructure endpoints, leading to potential exposure of sensitive resources that should remain inaccessible.

References