CVE-2026-74247: Quay: ssrf via build archive_url in quay build api

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-14 · updated 2026-11-01
Weakness: CWE-918

Description

A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.

Affected products

Red Hat OpenShift Update Service: all versions
Red Hat Quay 3: 3.0.0
Red Hat OpenShift Update Service: all versions
Red Hat Quay 3: all versions

References

https://access.redhat.com/security/cve/CVE-2026-74247
https://bugzilla.redhat.com/show_bug.cgi?id=2516144

Get alerted when CVE-2026-74247 or the next vulnerability affects your stack