CVE-2026-110697
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Nov 11, 2026
Vendor
unknown
Description
A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations.