Skip to content
fr Sign in
5.9 Medium

CVE-2026-74245 A flaw was found in Red Hat Quay's exported logs feature

Description

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

Affected products and versions

Product Affected versions Fixed in
Red Hat OpenShift Update Service Versions not published
Red Hat Quay 3 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat OpenShift Update Service

The 15 CVEs of Red Hat OpenShift Update Service →
CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 High CVE-2026-74247 A flaw was found in Red Hat Quay 4.2 Medium CVE-2026-74244 A flaw was found in Red Hat Quay's Stripe billing webhook handler 5.9 Medium CVE-2026-74243 A flaw was found in Red Hat Quay 6.5 Medium
Track this CVE