CVE-2026-32590

published 2026-04-08

CVE-2026-32590: A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a…

high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
redhat	mirror_registry_for_red_hat_openshift	—	—
redhat	quay	—	—

CWE-502