CVE-2026-74240

A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) authentication. Multiple issues related to audience verification and the enforcement of `azp` and `sub` claims were identified. These flaws could allow an attacker with a validly-signed token from the same identity provider to bypass configured security restrictions. This bypass could lead to unauthorized access by circumventing intended audience, subject, or authorized-client limitations.

• CWE-287

• https://access.redhat.com/security/cve/CVE-2026-74240Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2516139Issue Tracking, Vendor Advisory

Published

Aug 14, 2026

Last Modified

Aug 20, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-74227Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-74228Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-7423Integer underflow in the ICMP and ICMPv6 echo reply handlers…6.5
• CVE-2026-74234Legora before 2026-08-14 contains a cross-site scripting vul…7.7
• CVE-2026-74238TIER IV Nebula through 1.2.0 contains an out-of-bounds read …7.5
• CVE-2026-7424Integer underflow in the DHCPv6 sub-option parser in FreeRTO…8.1
• CVE-2026-74241A flaw was found in Red Hat Quay's external Lightweight Dire…6.5
• CVE-2026-74242A flaw was found in Red Hat Quay. An administrator of any re…4.4
• CVE-2026-74243A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_…8.2
• CVE-2026-74244A flaw was found in Red Hat Quay's Stripe billing webhook ha…7.5
• CVE-2026-74245A flaw was found in Red Hat Quay's exported logs feature. An…7.5
• CVE-2026-74247A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_…7.1