Red Hat Patches Critical Quay Flaws

Red Hat disclosed two critical flaws in Quay registries on November 11, allowing attackers to read and overwrite private container images. Fixed builds are released for eight Quay 3 branches, while CVE-2026-110697 lacks advisories for those specific releases. Dave O'Connor discovered the vulnerability.