The vulnerability in Red Hat Quay allows a user assigned to the GLOBAL_READONLY_SUPER_USERS group to retrieve robot account tokens for any repository, even if that user has no membership in the repository. This exposure enables an attacker with such read‑only superuser privileges to impersonate any robot account, potentially gaining unauthorized access to container images or performing privileged actions within the organization.

This issue affects Red Hat Quay 3. No specific patch release version is listed, so users should check with Red Hat for the latest update that addresses the flaw. The vulnerability is limited to instances where the GLOBAL_READONLY_SUPER_USERS role is misconfigured to include users who should not have access to robot tokens.

The CVSS score of 7.2 indicates a moderate to high severity, but the EPSS score of less than 1 % shows a very low current exploitation probability. The flaw is not listed in CISA KEV. By virtue of being a privileged role within Quay, the attack path does not require external network access; an attacker who can add or maintain a GLOBAL_READONLY_SUPER_USER can immediately view all robot tokens. The likely attack path is inferred directly from the description, as the specific external attack vector is not explicitly detailed in the CVE data.