CVE-2026-32590
No fix known EPSS <1%CVSS 7.1
A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.
Products: mirror registry for Red Hat OpenShift 2.0, Red Hat Quay 3.10, Red Hat Quay 3.12, Red Hat Quay 3.14, Red Hat Quay 3.15, Red Hat Quay 3.16, Red Hat Quay 3.17, Red Hat Quay 3.18, Red Hat Quay 3.9, mirror registry for Red Hat OpenShift