Vulnerabilities CVE-2026-32589

CVE-2026-32589

High

Open

TLP:CLEAR

Mirror-registry: quay: insecure direct object reference in blobupload

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.

Details

CVSS Score: 7.4
EPSS Score ⓘ: 0.24%

15.5th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Confidence: 90%
Published: Apr 8, 2026
Last Modified: Aug 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.