CVE-2026-74241
published 2026-08-14CVE-2026-74241: A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during…
PriorityP341medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
0.31%
22.6th percentile
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling user-existence oracle attacks at the referral Directory Name (DN). This could also potentially influence which DN is used for password binding in multi-domain Active Directory environments.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openshift-update-service | openshift-update-service-rhel8 | — | — |
| quay | quay-rhel8 | — | — |
| quay | quay-rhel9 | — | — |
| redhat | quay | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
vendor_redhat4.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
quay: LDAP referral filter injection in Quay external LDAP authentication
vendor_redhat·2026-08-14·CVSS 4.8
CVE-2026-74241 [MEDIUM] CWE-90 quay: LDAP referral filter injection in Quay external LDAP authentication
quay: LDAP referral filter injection in Quay external LDAP authentication
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling user-existence oracle attacks at the referral Directory Name (DN). This could also potentially influence which DN is used for password binding in multi-domain Active Directory environments.
Statement: This Moderate impact flaw in Red Hat Quay's external LDAP authentication arises from improper sanitization of username input during LDAP referral processing. While direct authentication bypass is prevented and directory enume
GHSA
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling.
ghsa_unreviewed·2026-08-15
CVE-2026-74241 [MEDIUM] CWE-90 A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling.
A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling user-existence oracle attacks at the referral Directory Name (DN). This could also potentially influence which DN is used for password binding in multi-domain Active Directory environments.
VulDB
Red Hat OpenShift Update Service/Quay LDAP Authentication Username ldap injection
vuldb·2026-08-15·CVSS 4.8
CVE-2026-74241 [MEDIUM] Red Hat OpenShift Update Service/Quay LDAP Authentication Username ldap injection
A vulnerability classified as critical has been found in Red Hat OpenShift Update Service and Quay. Affected by this vulnerability is an unknown functionality of the component LDAP Authentication. The manipulation of the argument Username leads to ldap injection.
This vulnerability is uniquely identified as CVE-2026-74241. The attack is possible to be carried out remotely. No exploit exists.
No detection rules found.
No public exploits indexed.
2026-08-14
Published