# CVE-2026-74241: Quay: ldap referral filter injection in quay external ldap authentication

> CVE-2026-74241: Quay: ldap referral filter injection in quay external ldap authentication. CVSS 4.8 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-74241
Last updated: 2026-08-20T19:13:47Z

- Published: 2026-08-14 22:43 UTC · Updated: 2026-08-20 19:13 UTC · Assigner: redhat
- CVSS: 4.8 (CVSS 3.1) · Severity: Medium · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
- EPSS: 0.31%, 24th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-90

## Description

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling user-existence oracle attacks at the referral Directory Name (DN). This could also potentially influence which DN is used for password binding in multi-domain Active Directory environments.

## Affected vendors and products

- Red Hat: Red Hat OpenShift Update Service
- Red Hat: Red Hat Quay 3

## Tracked companies

- [Red Hat (incl. Quay.io)](https://rewindex.com/company/red-hat.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-74241)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-74241)
- [https://access.redhat.com/security/cve/CVE-2026-74241](https://access.redhat.com/security/cve/CVE-2026-74241)
- [https://bugzilla.redhat.com/show\_bug.cgi?id=2516141](https://bugzilla.redhat.com/show_bug.cgi?id=2516141)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-74241 · Markdown: https://rewindex.com/cve/CVE-2026-74241.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-74241 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:10:57.431Z