CVE-2026-110697

Description

A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations.

References

• Advisories
• More

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS