CVE-2026-10052: Quay/config-tool: quay/config-tool: ssrf via unfiltered ldap and smtp config validation endpoints

Severity: medium (CVSS 4.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-29 · updated 2026-11-01
Weakness: CWE-918

Description

A flaw was found in the Quay config-tool's LDAP and SMTP validation functions. An attacker with config editor access can exploit these functions, which make outbound connections to user-supplied endpoints without proper IP or host filtering. This allows the attacker to perform internal network reconnaissance from the Quay pod's network position, potentially mapping the internal network infrastructure.

Affected products

Red Hat Quay 3: all versions

References

https://access.redhat.com/security/cve/CVE-2026-10052
https://bugzilla.redhat.com/show_bug.cgi?id=2483157

Get alerted when CVE-2026-10052 or the next vulnerability affects your stack