5.4
Medium
CVE-2026-74240 A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO)…
Description
A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) authentication. Multiple issues related to audience verification and the enforcement of `azp` and `sub` claims were identified. These flaws could allow an attacker with a validly-signed token from the same identity provider to bypass configured security restrictions. This bypass could lead to unauthorized access by circumventing intended audience, subject, or authorized-client limitations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift Update Service | Versions not published | |
| Red Hat Quay 3 | Versions not published |
References
- access.redhat.com access.redhat.com
- RHBZ#2516139 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift Update Service
The 15 CVEs of Red Hat OpenShift Update Service →
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
High
CVE-2026-74247
A flaw was found in Red Hat Quay
4.2
Medium
CVE-2026-74245
A flaw was found in Red Hat Quay's exported logs feature
5.9
Medium
CVE-2026-74244
A flaw was found in Red Hat Quay's Stripe billing webhook handler
5.9
Medium