Server-Side Request Forgery Vulnerability in Quay by Red Hat
CVE-2026-85471

6.4MEDIUM

Key Information:

Vendor

Red Hat
Status
Mirror Registry For Red Hat Openshift
Mirror Registry For Red Hat Openshift 2
Red Hat Quay 3
Vendor
CVE Published:
12 October 2026

What is CVE-2026-85471?

A flaw found in Quay allows an authenticated repository administrator to bypass the hostname blacklist used in webhook notifications. This could lead to a Server-Side Request Forgery (SSRF) vulnerability, enabling the Quay application to make requests to internal network resources. As a result, this may expose sensitive information from these internal services, including cloud metadata services and other resources within the cluster.

References

https://access.redhat.com/security/cve/CVE-2026-85471
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2528221
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.