Log in Start free

Vulnerability · Published Apr 8, 2026 · Assigned by redhat

CVE-2026-2377Mirror-registry: quay: quay: server-side request forgery via log export functionality

Medium 6.5

In plain English

A medium-severity server-side request forgery in mirror registry for Red Hat OpenShift from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 64.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as Server-Side Request Forgery (SSRF), could allow an attacker to send requests from the application's internal network, potentially leading to the disclosure of sensitive information.

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Quay 3.10 see references
Red Hat Red Hat Quay 3.12 see references
Red Hat Red Hat Quay 3.14 see references
Red Hat Red Hat Quay 3.15 see references
Red Hat Red Hat Quay 3.16 see references
Red Hat Red Hat Quay 3.9 see references
Red Hat mirror registry for Red Hat OpenShift see references
Red Hat mirror registry for Red Hat OpenShift 2 see references

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References