This vulnerability allows an authenticated user to read auto‑prune policy information for repositories in other namespaces, resulting in unauthorized information disclosure. Because the system does not enforce namespace scoping when a policy is requested by name and identifier, an attacker who controls a repository sharing a target name and knows the target policy UUID can retrieve that data. The weakness is an authorization bypass (CWE‑639).

The flaw affects Red Hat Quay 3 deployments. Any instance of Red Hat Quay 3 that permits user authentication with repository management privileges could be impacted. No specific version range is listed; the vulnerability applies to all Red Hat Quay 3 releases until a fix is released.

The CVSS score of 3.1 indicates low severity, and EPSS is not available, so the likelihood of exploitation is not quantified. The issue is not listed in CISA KEV. The attack requires the attacker to be authenticated to Quay, have control of a repository that shares the same name as the target repository, and know the target policy UUID. Because the attacker must already possess a valid account with repository permissions, exploitation is limited to insiders or compromised accounts. No public exploit code is available; however, the conditions for exploitation are straightforward for a privileged user, making the risk affect confidentiality in the affected instance.