CVE-2026-74245: redhat openshift_update_service

Vulnerability summary

CVE-2026-74245 is a high (CVSS 7.5) vulnerability in redhat openshift_update_service. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 34.7% of scored vulnerabilities.

Timeline

1. 14-08-2026
   PublishedVulnerability first disclosed.
2. 20-08-2026
   Last modifiedVulnerability information updated.

Description

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

• CWE-306Missing Authentication for Critical FunctionThe product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.