{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-110697/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:redhat:quay:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-110697"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Quay"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-110697","webserver","sql-injection","credential-access"],"_cs_type":"advisory","_cs_vendors":["Red Hat"],"content_html":"\u003cp\u003eRed Hat Quay is affected by a critical SQL injection vulnerability (CVE-2026-110697) within the robot account listing function. The application constructs a SQL LIKE pattern using user-controlled namespace names without sanitizing wildcard metacharacters. An attacker can create a namespace containing an underscore character to match and exfiltrate robot accounts and their decrypted authentication tokens from other tenants. This flaw breaks tenant isolation, leading to unauthorized image operations and cross-tenant credential theft.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows authenticated attackers to bypass tenant isolation boundaries, resulting in the theft of robot account credentials and decrypted tokens from any namespace in the Quay instance. This enables unauthorized read and write operations on container images across the entire platform.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eReview the official Red Hat security advisory to identify patched versions of Quay.\u003c/li\u003e\n\u003cli\u003eApply the relevant patch immediately to all affected Quay deployments.\u003c/li\u003e\n\u003cli\u003eAudit existing namespace naming conventions to ensure no unauthorized namespaces containing underscore characters have been created during the window of exposure.\u003c/li\u003e\n\u003cli\u003ePerform a rotation of all robot account tokens if suspicious cross-tenant activity is identified in audit logs.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-11T20:03:56Z","date_published":"2026-11-11T20:03:56Z","id":"https://feed.craftedsignal.io/briefs/2026-11-quay-sql-injection-cve-2026-110697/","summary":"Red Hat Quay contains an SQL injection vulnerability in the robot account listing function that allows authenticated attackers to perform cross-tenant credential theft.","title":"Red Hat Quay: SQL injection in robot account listing (CVE-2026-110697)","url":"https://feed.craftedsignal.io/briefs/2026-11-quay-sql-injection-cve-2026-110697/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-110697","version":"https://jsonfeed.org/version/1.1"}