PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-2377 Red Hat CVE debrief

A Server-Side Request Forgery (SSRF) vulnerability in Red Hat's Mirror Registry for Red Hat OpenShift allows authenticated attackers to abuse the log export feature by supplying a crafted URL, forcing the backend to make unauthorized requests to internal network resources. Published 2026-04-08 and modified 2026-05-20, this flaw carries a CVSS 3.1 score of 6.5 (Medium severity) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-918 and affects Mirror Registry for Red Hat OpenShift (including version 2.0) and Red Hat Quay 3.0.0. Red Hat has issued security advisory RHSA-2026:19375 to address this issue.

Vendor
Red Hat
Product
Red Hat Quay 3.16
CVSS
MEDIUM 6.5
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-08
Original CVE updated
2026-05-20
Advisory published
2026-04-08
Advisory updated
2026-05-20

Who should care

Organizations running Mirror Registry for Red Hat OpenShift or Red Hat Quay 3.0.0, particularly those with externally accessible instances and multi-tenant environments where authenticated users may have limited trust boundaries. Security teams responsible for container registry infrastructure and network segmentation should prioritize review.

Technical summary

The Mirror Registry for Red Hat OpenShift contains a log export feature that accepts user-supplied URLs without adequate validation. Authenticated attackers can exploit this by providing specially crafted URLs that cause the application backend to initiate requests to arbitrary internal network destinations. This SSRF vulnerability (CWE-918) enables unauthorized access to sensitive internal information and potentially other internal systems. The attack requires network access and valid authentication credentials but does not require user interaction. The confidentiality impact is rated High, with no direct impact to integrity or availability.

Defensive priority

medium

Recommended defensive actions

  • Apply Red Hat security advisory RHSA-2026:19375 when available
  • Review and restrict network access for Mirror Registry backend services
  • Implement URL validation and allowlisting for log export functionality
  • Monitor for anomalous outbound requests from Mirror Registry instances
  • Audit authenticated user access to log export features

Evidence notes

Vulnerability description and CVSS data sourced from NVD record. Vendor attribution and affected product versions confirmed via NVD CPE criteria. CWE-918 classification and Red Hat advisory references (RHSA-2026:19375, Bugzilla 2439201) extracted from official NVD reference metadata.

Official resources

2026-04-08