A flaw was found in Clair. The fetcher component makes outbound HTTP requests to attacker-supplied URIs from manifest layer descriptors without IP or scheme filtering. When PSK authentication is not configured (opt-in, not enforced by default), an unauthenticated attacker can submit a manifest with a URI pointing to internal services or cloud metadata endpoints. The SSRF is reflective for non-200 responses, leaking up to 256 bytes of error body content via CheckResponse error messages. Operator-managed Red Hat Quay deployments auto-configure PSK and are not exposed to the unauthenticated attack vector.

Rejected reason: Retracted following review by Red Hat Product Security and confirmation from the upstream Clair/Claircore maintainer. This CVE misattributes the described behavior to github.com/quay/claircore: the authentication mechanism in question (optional PSK, HTTP endpoint /indexer/api/v1/index_report) is implemented entirely in github.com/quay/clair; no PSK-related code exists anywhere in claircore's codebase or git history. The unauthenticated indexer API is Clair's documented, intentional design, authentication is an opt-in deployment choice, not a code defect. No fix commit was found in claircore between the version recorded as the affected boundary (1.5.52) and the following release (1.5.53); intervening commits are unrelated dependency and feature changes, so the "fixed in 1.5.52" status is inaccurate.

Red Hat, Inc.: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Red Hat, Inc.: CWE-918

Red Hat, Inc.: https://access.redhat.com/security/cve/CVE-2026-10517

Red Hat, Inc.: https://bugzilla.redhat.com/show_bug.cgi?id=2486779

[{"vendor":"Red Hat","product":"Red Hat Quay 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"quay/clair-rhel8","cpes":["cpe:/a:redhat:quay:3"]},{"vendor":"Red Hat","product":"Red Hat Quay 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"quay/clair-rhel9","cpes":["cpe:/a:redhat:quay:3"]}]

Title: Red Hat Quay 3 de Red Hat, Description: Se encontró una vulnerabilidad en Clair. El componente 'fetcher' realiza solicitudes HTTP salientes a URIs proporcionadas por el atacante desde descriptores de capas de manifiesto sin filtrado de IP o esquema. Cuando la autenticación PSK no está configurada (opcional, no aplicada por defecto), un atacante no autenticado puede enviar un manifiesto con una URI que apunta a servicios internos o puntos finales de metadatos en la nube. La SSRF es reflectiva para respuestas que no son 200, filtrando hasta 256 bytes de contenido del cuerpo del error a través de mensajes de error de CheckResponse. Las implementaciones de Red Hat Quay gestionadas por operadores auto-configuran PSK y no están expuestas al vector de ataque no autenticado.

https://bugzilla.redhat.com/show_bug.cgi?id=2486779

{"timestamp":"2026-06-01T10:21:59.947029Z","id":"CVE-2026-10517","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}

[{"vendor":"Red Hat","product":"Red Hat Quay 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"quay/clair-rhel8","cpes":["cpe:/a:redhat:quay:3"]},{"vendor":"Red Hat","product":"Red Hat Quay 3","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","packageName":"quay/clair-rhel9","cpes":["cpe:/a:redhat:quay:3"]}]

A flaw was found in Clair. The fetcher component makes outbound HTTP requests to attacker-supplied URIs from manifest layer descriptors without IP or scheme filtering. When PSK authentication is not configured (opt-in, not enforced by default), an unauthenticated attacker can submit a manifest with a URI pointing to internal services or cloud metadata endpoints. The SSRF is reflective for non-200 responses, leaking up to 256 bytes of error body content via CheckResponse error messages. Operator-managed Red Hat Quay deployments auto-configure PSK and are not exposed to the unauthenticated attack vector.

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

CWE-918

https://access.redhat.com/security/cve/CVE-2026-10517