This vulnerability exists in Red Hat Quay's Proxy Cache configuration, where the system makes network connections to user-supplied registry hostnames without verifying their legitimacy. An attacker with organization administrator privileges can exploit this by providing a malicious hostname, causing the Quay server to send requests to internal network services or cloud infrastructure endpoints that should not be accessible. This SSRF vulnerability could lead to unauthorized information disclosure or limited impact on integrity due to forced internal requests. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, user interaction required, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact.

The vulnerability allows an attacker with organization administrator privileges to cause the Quay server to make unauthorized network requests to internal or protected resources. This can result in unauthorized disclosure of sensitive information from internal services or cloud infrastructure endpoints. The impact on confidentiality is high, while integrity impact is low and availability is not affected. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-32591 for current remediation guidance. Until an official fix is available, restrict organization administrator privileges to trusted users only and monitor configuration changes to the Proxy Cache feature to prevent malicious hostname entries.