Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

Two critical vulnerabilities in Red Hat Quay have been disclosed, allowing attackers to read and overwrite private container images in any repository. CVE-2026-123710 enables an unauthenticated attacker to add a trusted signing key with no expiry, allowing them to generate valid access tokens for any repository, even without credentials. CVE-2026-110697 allows a user who can create a namespace with an underscore to exploit an SQL injection in the robot account listing logic, stealing other tenants' robot account tokens and gaining unauthorized access to their images.

AI-extracted · verify before operational use