Red HatCVE-2026-18255
Quay. A user configured: improper authorization
High7.2CVE-2026-18255 · Published Jul 29, 2026 · updated Sep 22, 2026
A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-863
- www.cve.org/CVERecord?id=CVE-2026-18255
- nvd.nist.gov/vuln/detail/CVE-2026-18255
- access.redhat.com/errata/RHSA-2026:63307
- access.redhat.com/errata/RHSA-2026:65514
- access.redhat.com/errata/RHSA-2026:66084
- access.redhat.com/errata/RHSA-2026:66523
- access.redhat.com/errata/RHSA-2026:69255
- access.redhat.com/errata/RHSA-2026:70267
- access.redhat.com/security/cve/CVE-2026-18255
- bugzilla.redhat.com/show_bug.cgi?id=2508454
More Red Hat advisories
All Red Hat| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jul 29 | Red Hat BFD: out-of-bounds write | High7.8 | No fix yet |
| Jul 29 | Red Hat Data Grid 8: missing authorization | Medium5.5 | No fix yet |
| Jul 29 | Red Hat client policy enforcement mechanism of Keycloak: improper authorization | Medium6.5 | No fix yet |
| Jul 28 | Red Hat CRIU: code injection | High7.8 | No fix yet |
| Jul 28 | Red Hat sg3_utils. The sg_inq command: code execution | High7.6 | No fix yet |
| Jul 28 | A flaw was found in openshift/oauth-proxy | High8.5 | No fix yet |