Description
A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.
Published: 2026-08-14
Score: 4.2 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A flaw in Red Hat Quay allows a user who has write access to a repository and the FEATURE_BUILD_SUPPORT capability enabled to supply an arbitrary URL to the build API. The Quay builder will then issue an HTTP request to the supplied URL, potentially reaching internal network services and revealing sensitive information. The weakness is a server‑side request forgery as classified by CWE‑918.

Affected Systems

Red Hat Quay 3 and Red Hat OpenShift Update Service 5 are affected. The CVE does not specify particular sub‑versions or patch levels beyond the product name.

Risk and Exploitability

The CVSS score is 4.2, indicating low overall severity. No EPSS data is available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires that the attacker possess write permission on the repository and that FEATURE_BUILD_SUPPORT be enabled, limiting the attack surface. The risk is therefore moderate within those constraints, but the potential for internal data disclosure remains if the exploit is successful.

Generated by OpenCVE AI on August 15, 2026 at 00:20 UTC.

Remediation

Vendor Workaround

To mitigate this issue, disable the `FEATURE_BUILD_SUPPORT` feature in Red Hat Quay if it is not essential for your operations. This action prevents the vulnerable build API endpoint from being exploited. Refer to the Red Hat Quay product documentation for detailed instructions on managing and disabling features.

OpenCVE Recommended Actions

  • Disable the FEATURE_BUILD_SUPPORT feature in Red Hat Quay if it is not required for your operations
  • Limit repository write access to trusted users only, ensuring that only authorized personnel can invoke the build API
  • Enable logging and monitor build API activity for unexpected outbound requests or suspicious parameters

Generated by OpenCVE AI on August 15, 2026 at 00:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 15 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 14 Aug 2026 23:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.
Title Quay: ssrf via build archive_url in quay build api
First Time appeared Redhat
Redhat openshift Update Service
Redhat quay
Weaknesses CWE-918
CPEs cpe:/a:redhat:openshift_update_service:5
cpe:/a:redhat:quay:3
Vendors & Products Redhat
Redhat openshift Update Service
Redhat quay
References
Metrics cvssV3_1

{'score': 4.2, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N'}

Subscriptions

Redhat Openshift Update Service Quay
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-14T22:43:15.488Z

Reserved: 2026-08-14T19:46:37.191Z

Link: CVE-2026-74247

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-14T23:16:34.730

Modified: 2026-08-14T23:16:34.730

Link: CVE-2026-74247

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-14T00:00:00Z

Links: CVE-2026-74247 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T00:30:16Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)