Skip to content
fr Sign in
5.2 Medium

CVE-2026-32591 A flaw was found in Red Hat Quay's Proxy Cache configuration feature

Description

A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.

Affected products and versions

Product Affected versions Fixed in
mirror registry for Red Hat OpenShift Versions not published
mirror registry for Red Hat OpenShift 2 Versions not published
Red Hat Quay 3 Versions not published
Red Hat Quay 3.16 1783955846 earliest → < 1783955846 1783955846
Red Hat Quay 3.14 1788593843 earliest → < 1788593843 1788593843
Red Hat Quay 3.17 1780604033 earliest → < 1780604033 1780604033
Red Hat Quay 3.9 1784125838 earliest → < 1784125838 1784125838
Red Hat Quay 3.10 1783750447 earliest → < 1783750447 1783750447
Red Hat Quay 3.1 1783750447 earliest → < 1783750447 1783750447
Show the 3 other branches
Product Affected versions Fixed in
Red Hat Quay 3.12 1784353904 earliest → < 1784353904 1784353904
Red Hat Quay 3.15 1784351966 earliest → < 1784351966 1784351966
Red Hat Quay 3.18 1784987273 earliest → < 1784987273 1784987273

References

Timeline

  1. Published
  2. Last modified

Other CVEs of mirror registry for Red Hat OpenShift

The 20 CVEs of mirror registry for Red Hat OpenShift →
CVE-2026-85471 A flaw was found in Quay 6.4 Medium CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 High CVE-2026-32590 A flaw was found in Red Hat Quay's handling of resumable container image layer uploads 7.1 High CVE-2026-32589 A flaw was found in Red Hat Quay's container image upload process 7.4 High
Track this CVE