CVE-2026-74241

Name of the Vulnerable Software and Affected Versions Red Hat Quay (affected versions not specified)

Description An issue exists in the external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during the authentication process, the system fails to properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, facilitating user-existence oracle attacks at the referral Directory Name (DN). In multi-domain Active Directory environments, this flaw could potentially influence which DN is utilized for password binding.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.