CVE-2026-110697
Red Hat OpenShift Update Service, Red Hat Quay 3, Red Hat Quay 5
Published 11 Nov 2026 · updated 11 Nov 2026 · Awaiting Analysis
9.9 Critical · CVSS 3.1, redhat.com
Description
A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations.