A Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-2377) exists in Red Hat Quay and the mirror registry for Red Hat OpenShift. The log export feature allows an authenticated user to specify an arbitrary callback URL, which the backend then accesses via HTTP requests. This flaw could allow attackers to make requests from the application's internal network, potentially leading to disclosure of sensitive information. The vulnerability has a CVSS 3.1 base score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Red Hat has published security advisories and released fixed versions of Red Hat Quay (notably 3.14.8 and 3.16.4) that address this issue. The advisories recommend applying these updates after ensuring all previously released errata are applied. No known exploits in the wild have been reported.

An authenticated attacker can exploit this SSRF vulnerability to cause the backend server to make arbitrary HTTP requests to internal or external systems. This may lead to unauthorized disclosure of sensitive information accessible from the internal network. The vulnerability does not impact integrity or availability but has a high impact on confidentiality. No active exploitation has been reported.

Red Hat has released fixed versions of Red Hat Quay, including 3.14.8 and 3.16.4, which address this SSRF vulnerability. Users should apply these updates after ensuring all previously released errata relevant to their system have been applied. Refer to Red Hat advisories RHSA-2026:19375 and RHSA-2026:21017 for detailed update instructions. No additional mitigations are specified by the vendor.