CVE-2026-32590: Red Hat Mirror Registry For Red Hat Openshift

High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.

Affected products

• Red Hat Mirror Registry For Red Hat Openshift: affected versions not specified; version 2.0 only
• Red Hat Quay: version 3.0.0 only

Published 2026-04-08. Last modified 2026-09-09.