CVE-2026-74241 Quay: ldap referral filter injection in quay external ldap authentication

What is CVE-2026-74241?

CVE-2026-74241 is a medium-severity vulnerability in Red Hat OpenShift Update Service, published on 14 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling. When an LDAP referral is returned during authentication, the system does not properly escape the username input. This allows an attacker to inject LDAP filter metacharacters, enabling user-existence oracle attacks at the referral Directory Name (DN). This could also potentially influence which DN is used for password binding in multi-domain Active Directory environments.

Weakness: CWE-90

Which versions are affected by CVE-2026-74241?

It affects 2 products.

Products include Redhat Openshift Update Service, Redhat Quay.

How do I fix CVE-2026-74241?

No fix has been published for CVE-2026-74241 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-74241 being exploited?

There is no known exploitation of CVE-2026-74241 in the wild and no public exploit code.

Other vulnerabilities in Red Hat OpenShift Update Service

• CVE-2026-74243 Quay: unauthenticated secscan notification endpoint in quay when psk is unset Medium 6.5
• CVE-2025-57854 Osus-operator: privilege escalation via excessive /etc/passwd permissions Medium 6.4
• CVE-2026-74244 Quay: stripe webhook accepts forged events without signature verification in quay Medium 5.9
• CVE-2026-74245 Quay: unauthenticated exported logs download in quay Medium 5.9
• CVE-2026-74240 Quay: jwt claim validation bypasses in quay federated robot and sso authentication Medium 5.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x5cw-v6mp-3p93.