CVE-2026-18255: Incorrect Authorization in Red Hat Red Hat Quay 3.10
A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.
AI Analysis
Technical Summary
This vulnerability in Red Hat Quay 3 involves incorrect authorization that permits users in the GLOBAL_READONLY_SUPER_USERS group to access robot account tokens for repositories outside their membership. This unauthorized access enables impersonation of robot accounts by attackers holding read-only superuser privileges. The CVSS 3.1 score of 7.2 reflects high impact on confidentiality, integrity, and availability. There is no vendor advisory content indicating an available patch or mitigation, and no affected versions are explicitly stated.
Potential Impact
An attacker with read-only superuser privileges can view sensitive robot account tokens for repositories they are not authorized to access. This exposure can lead to impersonation of robot accounts, potentially allowing unauthorized actions or access within the affected system. The impact affects confidentiality, integrity, and availability as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-18255 for current remediation guidance. Until an official fix is available, restrict assignment of GLOBAL_READONLY_SUPER_USERS privileges to trusted users only to minimize risk.
CVE-2026-18255: Incorrect Authorization in Red Hat Red Hat Quay 3.10
Description
A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.
CVSS v3.1
Score 7.2high
Affected software
Red Hat
Red Hat Quay 3.10
Red Hat
Red Hat Quay 3.12
Red Hat
Red Hat Quay 3.15
Red Hat
Red Hat Quay 3.9
Red Hat
Red Hat Quay 3
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Red Hat Quay 3 involves incorrect authorization that permits users in the GLOBAL_READONLY_SUPER_USERS group to access robot account tokens for repositories outside their membership. This unauthorized access enables impersonation of robot accounts by attackers holding read-only superuser privileges. The CVSS 3.1 score of 7.2 reflects high impact on confidentiality, integrity, and availability. There is no vendor advisory content indicating an available patch or mitigation, and no affected versions are explicitly stated.
Potential Impact
An attacker with read-only superuser privileges can view sensitive robot account tokens for repositories they are not authorized to access. This exposure can lead to impersonation of robot accounts, potentially allowing unauthorized actions or access within the affected system. The impact affects confidentiality, integrity, and availability as per the CVSS vector.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-18255 for current remediation guidance. Until an official fix is available, restrict assignment of GLOBAL_READONLY_SUPER_USERS privileges to trusted users only to minimize risk.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-29T16:19:25.998Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-18255","vendor":"Red Hat"}]
Threat ID: 6a6a48789c2644c7f8e5159d
Added to database: 07/29/2026, 18:37:44 UTC
Last enriched: 07/29/2026, 18:52:04 UTC
Last updated: 09/12/2026, 22:13:36 UTC
Views: 90
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.