Description
A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud infrastructure endpoints that should not be reachable from the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat OpenShift Update Service | — | — |
| Red Hat | Red Hat Quay 3 | — | — |
Advisories 1
- WID-SEC-2026-2498 Red Hat Quay: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jul 23, 2026
References
- https://access.redhat.com/security/cve/CVE-2026-16910 vdb-entry
- RHBZ#2506685 issue-tracking