Critical Vulnerability in Red Hat Quay Exposes Private Container Images

• •CVE-2026-123710 allows unauthenticated access to private container images.
• •Attackers can exploit key rotation weaknesses to gain unauthorized repository access.
• •Red Hat recommends restricting access to the key-management service and monitoring logs.

A critical vulnerability in Red Hat Quay, tracked as CVE-2026-123710 with a CVSS score of 9.8, allows unauthenticated attackers to take over registry token signing. This flaw enables attackers to obtain a registry token and exploit weaknesses in the key rotation mechanism, granting them read and write access to private container images. The vulnerability affects deployments where the service managing signing keys is accessible to untrusted clients. Red Hat advises restricting access to the key-management service and reviewing logs for suspicious key changes. No fixed version has been identified yet, but fixes for this and another vulnerability (CVE-2026-110697) were merged into the project’s GitHub repository on November 11, 2026. Attackers can reinstall malicious keys until a fix is deployed, posing a significant risk to organizations using Red Hat Quay.