{"id":"CVE-2026-18255","revision":"ed709913e13f4f16a8ab434603e5cdc5","records":[{"revision":"ed709913e13f4f16a8ab434603e5cdc5","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-18255","aliases":[],"title":"Quay: quay: global read-only superuser can view robot account tokens","description":"A flaw was found in Quay. A user configured in GLOBAL_READONLY_SUPER_USERS is able to view robot account tokens for repositories they are not a member of, allowing an attacker with read-only superuser privileges to impersonate any robot account.","state":0,"publishedAt":"2026-07-29T16:34:44.442+00:00","modifiedAt":"2026-10-12T21:10:04.837+00:00","affected":[{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.10\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788561841\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.10::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.12\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788594376\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.12::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.14\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788593843\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.14::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.15\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788191755\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.15::el8\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.16\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1789563753\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.16::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.17\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1790690298\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.17::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.18\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel9\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1791265590\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.18::el9\"\n ]\n }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"quay/quay-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n \"vendor\": \"Red Hat\",\n \"product\": \"Red Hat Quay 3.9\",\n \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n \"packageName\": \"quay/quay-rhel8\",\n \"defaultStatus\": \"affected\",\n \"versions\": [\n {\n \"version\": \"1788595574\",\n \"lessThan\": \"*\",\n \"versionType\": \"rpm\",\n \"status\": \"unaffected\"\n }\n ],\n \"cpes\": [\n \"cpe:/a:redhat:quay:3.9::el8\"\n ]\n }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","score":7.2,"severity":"HIGH"}],"references":["https://access.redhat.com/errata/RHSA-2026:63307","https://access.redhat.com/errata/RHSA-2026:65514","https://access.redhat.com/errata/RHSA-2026:66084","https://access.redhat.com/errata/RHSA-2026:66523","https://access.redhat.com/errata/RHSA-2026:69255","https://access.redhat.com/errata/RHSA-2026:70267","https://access.redhat.com/errata/RHSA-2026:74511","https://access.redhat.com/errata/RHSA-2026:81110","https://access.redhat.com/security/cve/CVE-2026-18255","https://bugzilla.redhat.com/show_bug.cgi?id=2508454"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-18255","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-18255","identifiers":["CVE-2026-18255"]},"retained":false,"historicalAffected":[]}],"coverage":[]}