Riskcovery

CVE-2026-32591

Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

State
Published
Severity
5.2 Medium
Published
Apr 8, 2026
Updated
Nov 1, 2026
Reserved
Mar 12, 2026

Read the record on cve.org

Description

A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.

Scores

CVSSScoreVectorSource
3.15.2 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:Nredhat
3.15.2 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:Nredhat-SADP

Weaknesses

  • CWE-918 Server-Side Request Forgery

Affected Products

ProductVersions
Red Hat Quay 3.10Red Hat
  • 1783750447 and laterNot affected
Red Hat Quay 3.12Red Hat
  • 1783751865 and laterNot affected
Red Hat Quay 3.12Red Hat
  • 1784353904 and laterNot affected
Red Hat Quay 3.14Red Hat
  • 1788593843 and laterNot affected
Red Hat Quay 3.15Red Hat
  • 1784351966 and laterNot affected
Red Hat Quay 3.16Red Hat
  • 1783955846 and laterNot affected
Red Hat Quay 3.17Red Hat
  • 1780604033 and laterNot affected
Red Hat Quay 3.18Red Hat
  • 1784987273 and laterNot affected
Red Hat Quay 3.9Red Hat
  • 1784125838 and laterNot affected
mirror registry for Red Hat OpenShiftRed Hat
    mirror registry for Red Hat OpenShift 2Red Hat

      References

      Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.