CVE-2026-109194: Red Hat Quay 3 (exact versions not specified)

Affected technology

Red Hat Quay 3 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated user with administrative access to any repository can view, modify, or permanently delete build triggers and associated write tokens of another repository if they know the victim trigger's universally unique identifier (UUID). Vendor/CNA’s CVSS 3.1 assessment (base score 6.4/10) rates confidentiality and availability impact as low; integrity impact as high.