CVE-2026-32591: Server-Side Request Forgery (SSRF) in Red Hat Red Hat Quay 3.1
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
AI Analysis
Technical Summary
A vulnerability in Red Hat Quay's Proxy Cache configuration allows an organization administrator to specify an upstream registry hostname that is not verified for legitimacy. This lack of validation enables Server-Side Request Forgery (SSRF), where the Quay server can be coerced into making network requests to internal network services or cloud infrastructure endpoints that should not be accessible. The vulnerability affects Red Hat Quay versions prior to 3.17.3. The CVSS 3.1 base score is 5.2, reflecting a medium severity with high confidentiality impact but limited integrity and no availability impact. Red Hat has published security advisories and released Red Hat Quay 3.17.3 as a fix.
Potential Impact
An attacker with organization administrator privileges can exploit this SSRF vulnerability to make the Quay server initiate network connections to internal or cloud infrastructure resources that are normally inaccessible. This can lead to unauthorized disclosure of sensitive information (confidentiality impact is high). The integrity impact is low, and there is no impact on availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released Red Hat Quay version 3.17.3 which addresses this vulnerability. Users should upgrade to version 3.17.3 or later to remediate this issue. There is no indication from the vendor advisory that temporary mitigations or workarounds are available or required. Patch status is confirmed by Red Hat advisories RHSA-2026:24833 and RHSA-2026:40262. Ensure all previously released errata are applied before updating.
CVE-2026-32591: Server-Side Request Forgery (SSRF) in Red Hat Red Hat Quay 3.1
Description
A flaw was found in Red Hat Quay's Proxy Cache configuration feature. When an organization administrator configures an upstream registry for proxy caching, Quay makes a network connection to the specified registry hostname without verifying that it points to a legitimate external service. An attacker with organization administrator privileges could supply a crafted hostname to force the Quay server to make requests to internal network services, cloud infrastructure endpoints, or other resources that should not be accessible from the Quay application.
CVSS v3.1
Score 5.2medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
A vulnerability in Red Hat Quay's Proxy Cache configuration allows an organization administrator to specify an upstream registry hostname that is not verified for legitimacy. This lack of validation enables Server-Side Request Forgery (SSRF), where the Quay server can be coerced into making network requests to internal network services or cloud infrastructure endpoints that should not be accessible. The vulnerability affects Red Hat Quay versions prior to 3.17.3. The CVSS 3.1 base score is 5.2, reflecting a medium severity with high confidentiality impact but limited integrity and no availability impact. Red Hat has published security advisories and released Red Hat Quay 3.17.3 as a fix.
Potential Impact
An attacker with organization administrator privileges can exploit this SSRF vulnerability to make the Quay server initiate network connections to internal or cloud infrastructure resources that are normally inaccessible. This can lead to unauthorized disclosure of sensitive information (confidentiality impact is high). The integrity impact is low, and there is no impact on availability. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released Red Hat Quay version 3.17.3 which addresses this vulnerability. Users should upgrade to version 3.17.3 or later to remediate this issue. There is no indication from the vendor advisory that temporary mitigations or workarounds are available or required. Patch status is confirmed by Red Hat advisories RHSA-2026:24833 and RHSA-2026:40262. Ensure all previously released errata are applied before updating.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-03-12T14:39:53.657Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-32591","vendor":"Red Hat"}]
Threat ID: 69d737011cc7ad14da419497
Added to database: 04/09/2026, 05:20:01 UTC
Last enriched: 07/30/2026, 21:37:45 UTC
Last updated: 07/31/2026, 20:26:40 UTC
Views: 152
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.