# CVE-2026-110697: Quay: quay: sql like wildcard injection in robot listing leaks cross-tenant robot tokens

Status: published. Published: 2026-11-11. Updated: 2026-11-12.

A flaw was found in Quay where the robot account listing function constructs a SQL LIKE pattern from user-controlled namespace names without escaping wildcard metacharacters. An attacker who creates a namespace containing an underscore character can match and retrieve robot accounts and their decrypted authentication tokens from other tenants' namespaces, leading to cross-tenant credential theft and unauthorized image operations.

## Remediation

- workaround: Update to the fixed Red Hat Quay release for your version: 3.9.28, 3.10.28, 3.12.24, 3.14.10, 3.15.9, 3.16.7, 3.17.7, or 3.18.3. Red Hat has already fixed Quay.io. There is no other complete workaround.
If you cannot update immediately, restrict who can create organizations or namespaces containing an underscore, rotate robot tokens for any namespace that collides with an underscore-containing one, and monitor registry activity for pulls or pushes that don't match expected robot usage. These steps reduce exposure but do not fix the underlying flaw. (source: CNA: redhat)

## Affected products and versions

- Red Hat / Red Hat OpenShift Update Service (openshift-update-service/openshift-update-service-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Quay 3 (quay/quay-rhel8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Quay 3 (quay/quay-rhel9): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Quay 5 (quay/quay-rhel9): Version range not reported. Source: CNA: redhat

## Severity and prioritization

- CVSS 3.1: 9.9 (critical); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; source: CNA: redhat

- CVSS 3.1: 9.9 (critical); CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H; source: NVD: secalert@redhat.com

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: CWE-89

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://access.redhat.com/security/cve/CVE-2026-110697 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- https://access.redhat.com/solutions/7149592 (CNA: redhat)

- https://bugzilla.redhat.com/show_bug.cgi?id=2552237 (CNA: redhat; issue-tracking, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2026-110697 (secalert@redhat.com)

- https://bugzilla.redhat.com/show_bug.cgi?id=2552237 (secalert@redhat.com)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2026-110697; retrieved 2026-11-12; source updated 2026-11-12

- NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-110697; retrieved 2026-11-11; source updated 2026-11-11

Revision: a3b902a688ff7a7701ed16b0e6cb0b8440429b83b84cdef587ded1cfef8798b2

Canonical: https://y2.dev/cve/CVE-2026-110697

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.