CVE-2025-4374

Name of the Vulnerable Software and Affected Versions Quay (affected versions not specified)

Description A flaw was found in Quay where an organization acting as a proxy cache grants "Admin" permissions on a newly created repository when a user or robot pulls an image that hasn't been mirrored yet. This issue can affect even robot accounts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.