CVE-2026-74245

Name of the Vulnerable Software and Affected Versions Red Hat Quay (affected versions not specified)

Description A flaw in the exported logs feature allows an unauthenticated attacker to download exported action logs without proper authorization if they possess a valid file ID. Although these IDs are complex, they may be intercepted via plaintext email or webhook callbacks. This issue results in information disclosure, which can expose sensitive data including usernames, email addresses, IP addresses, and action-specific metadata.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.