High severity · published Apr 8, 2026
CVE-2026-32589
Mirror-registry: quay: insecure direct object reference in blobupload
7.4
CVSS
0.2%
EPSS
No
On KEV
Description
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat Quay 3.10 · Red Hat
All versions, or not specified · source: vendor, CISA
RH
Red Hat Quay 3.12 · Red Hat
All versions, or not specified · source: vendor, CISA
RH
Red Hat Quay 3.14 · Red Hat
All versions, or not specified · source: vendor, CISA
RH
Red Hat Quay 3.15 · Red Hat
All versions, or not specified · source: vendor, CISA
RH
Red Hat Quay 3.16 · Red Hat
All versions, or not specified · source: vendor, CISA
RH
Red Hat Quay 3.17 · Red Hat
All versions, or not specified · source: vendor, CISA
RH
Red Hat Quay 3.9 · Red Hat
All versions, or not specified · source: vendor, CISA
MR
Mirror Registry For Red Hat Openshift · Redhat
2.0 · source: vendor, NVD, CISA
MR
mirror registry for Red Hat OpenShift 2.0 · Red Hat
All versions, or not specified · source: vendor, CISA
QU
Quay · Redhat
3.0.0 · source: NVD
Affected product
MR
mirror registry for Red Hat OpenShift
Red Hat
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-32589
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-32589
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:19375
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:21017
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:22465
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:22629
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:22840
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:23361
More from mirror registry for Red Hat OpenShift
8.8
CVE-2026-32590
Mirror-registry: remote code execution using pickle deserialization
8.2
CVE-2026-33810
Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
7.5
CVE-2026-27137
Incorrect enforcement of email constraints in crypto/x509
6.5
CVE-2026-2377
Mirror-registry: quay: quay: server-side request forgery via log export functionality
6.4
CVE-2026-85471
Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable