CVE-2026-32591

medium

Published 2026-04-08 · Modified 2026-06-03

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

5.5

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

CVSS v4 NEW

—

not yet in upstream

VIR risk

5.5

Description

A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.

Predictions

Exploit likelihood

65%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Red Hat Errata — Red Hat Inc. · View original ↗ · Open-Errata-API

Description mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration Red Hat statement Exploitation requires the attacker to be authenticated as an organization administrator. CVSS v3: 5.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N) Errata / fixed releases ProductPackageAdvisoryReleased Red Hat Quay…

Description

mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration

Red Hat statement

Exploitation requires the attacker to be authenticated as an organization administrator.

CVSS v3: 5.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N)

Errata / fixed releases

Product	Package	Advisory	Released
Red Hat Quay 3.14	`quay/quay-rhel8:1779689392`	RHSA-2026:21017	2026-05-26T00:00:00Z
Red Hat Quay 3.16	`quay/quay-rhel9:1779204086`	RHSA-2026:19375	2026-05-19T00:00:00Z

Package state

Product	Package	State
mirror registry for Red Hat OpenShift	`openshift/mirror-registry-rhel8`	Affected
mirror registry for Red Hat OpenShift 2	`openshift/mirror-registry-rhel8`	Affected

Apply commands

bash fix

Apply RHSA-2026:21017 for Red Hat Quay 3.14

yum update -y quay/quay-rhel8:1779689392
# or:
dnf upgrade -y quay/quay-rhel8:1779689392

Affected

Vendor	Product	Version
redhat	mirror registry for Red Hat OpenShift	`Affected`
redhat	mirror registry for Red Hat OpenShift 2	`Affected`

Application impact

Vendor	Product	Versions
redhat	mirror_registry_for_red_hat_openshift	`-`
redhat	mirror_registry_for_red_hat_openshift	`2.0`
redhat	quay	`3.0.0`

References

CWEs

CWE-918

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.