This vulnerability affects Red Hat Quay's container image upload process in the mirror registry for Red Hat OpenShift. It allows an authenticated user with push access to any repository to interfere with image uploads in progress by other users, even in repositories where they lack access. This can lead to unauthorized reading, modification, or cancellation of image uploads. The CVSS 3.1 score is 7.1, indicating high severity with network attack vector, high impact on integrity, and low impact on confidentiality and availability. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation details.

An attacker with authenticated push access can bypass authorization controls to interfere with other users' image uploads, potentially leading to unauthorized disclosure (read), modification, or denial (cancel) of container images being uploaded. This could affect the integrity and availability of container images in the registry, impacting deployment and security of containerized applications.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-32589 for current remediation guidance. No explicit patch or workaround is mentioned in the provided data. Users should monitor the vendor advisory for updates and apply any official fixes once available.