CVE-2026-6848
Quay: red hat quay: authentication bypass allows privileged actions without valid credentials
- State
- Published
- Severity
- 5.4 Medium
- Published
- Apr 22, 2026
- Updated
- Nov 1, 2026
- Reserved
- Apr 22, 2026
Description
A flaw was found in Red Hat Quay. When Red Hat Quay requests password re-verification for sensitive operations, such as token generation or robot account creation, the re-authentication prompt can be bypassed. This allows a user with a timed-out session, or an attacker with access to an idle authenticated browser session, to perform privileged actions without providing valid credentials. The vulnerability enables unauthorized execution of sensitive operations despite the user interface displaying an error for invalid credentials.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.4 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | redhat |
Weaknesses
- CWE-613 DEPRECATED: Insufficient Session Expiration
Affected Products
| Product | Versions |
|---|---|
Red Hat Quay 3Red Hat | |
Red Hat Quay 3Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-6848vdb-entry
- RHBZ#2460119issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.