OpenShift

Critical Flaws in Red Hat Quay Expose All Private Container Images to Read and Overwrite Attacks

Red Hat has disclosed two critical vulnerabilities in its Quay container registry platform that allow attackers to read, overwrite, or delete private container images across all repositories. The first flaw, CVE-2026-123710 with a CVSS score of 9.8, enables an attacker to inject a persistent trusted signing key that bypasses authentication for any repository, even when anonymous access is disabled. The second issue, CVE-2026-110697 scoring 9.9, stems from an unescaped SQL LIKE pattern in robot account listing that lets any namespace creator steal decrypted tokens from other tenants. Both flaws affect every Quay 3 and Quay 5 release and impact standalone deployments, OpenShift-integrated registries, and the mirror registry. Red Hat recommends blocking the /keys endpoint at the proxy layer, auditing for suspicious service_key_rotate events, and restricting namespace creation containing underscores until patches are applied. The upstream fixes add token rotation validation, mandatory key expiry, and proper escaping for robot account searches.