This vulnerability arises from insufficient validation in the LDAP and SMTP validation functions of Red Hat Quay 3's config-tool. Specifically, these functions perform outbound network requests to user-supplied endpoints without adequate IP or host filtering, allowing an attacker with configuration editor access to conduct SSRF attacks. The attacker can leverage this to map internal network infrastructure from the perspective of the Quay pod. The CVSS vector indicates the attack requires network access and privileges (PR:H), does not require user interaction, and impacts confidentiality with limited scope and no integrity or availability impact.

The impact is limited to internal network reconnaissance, potentially exposing internal network topology information to an attacker with configuration editor access. There is no direct impact on data integrity or availability. Confidentiality impact is limited, as the attacker can only gather network information accessible from the Quay pod's network position. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-10052 for current remediation guidance. Until an official fix is available, restrict config editor access to trusted users only to prevent exploitation. Monitor Red Hat's advisory for updates on patches or official mitigations.