CVE-2026-105447

Name of the Vulnerable Software and Affected Versions Quay (affected versions not specified)

Description An issue exists when handling build trigger requests where the application incorrectly exposes trigger configuration details. This exposure includes repository write tokens, which can be accessed by authenticated users with global read-only administrative privileges by querying the build trigger API. By retrieving these delegate tokens, a restricted user can bypass read-only limitations to push arbitrary container images to private repositories, resulting in privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.