Published Nov 12, 2026, 11:27 AM ET · Updated a day ago · 1 source
Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
The Hacker News
·
Original Report
INFERY
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can still exploit the flaw, Red Hat said yesterday. The company has released fixed builds for eight Quay