Critical Vulnerability in Red Hat Quay Exposes Private Container Images

## Overview A critical vulnerability has been identified in Red Hat Quay, tracked as CVE-2026-123710. This flaw allows unauthenticated clients to exploit the system and gain unauthorized access to private container images. ## Technical Details The vulnerability arises when an unauthenticated client obtains an anonymous registry token with a controlled audience. This token can be presented to the service key rotation endpoint, enabling the client to install its own approved signing key without an expiry date. Registry tokens signed with this key are then accepted for any repository, granting the attacker read and write access to private images and the ability to replace repository tags. ## Impact The exploitation of this vulnerability can lead to significant security breaches. Attackers can read and overwrite all private container images within a registry. This poses a severe risk to organizations relying on Red Hat Quay for container management, as it can facilitate theft and tampering of sensitive data. ## Mitigation Defenders should prioritize updating Red Hat Quay to the latest version as soon as possible. It is crucial to review access controls and monitor for any unauthorized activities within container registries. Implementing additional security measures, such as network segmentation and enhanced logging, can help mitigate potential risks associated with this vulnerability.