CVE-2026-126320

Dockhand versions before 1.0.55 are affected by an improper authorization vulnerability in the files/download endpoint. The flaw allows authenticated Enterprise RBAC users with only containers:view permissions to download arbitrary container files, as the system fails to enforce the required cont...

CVE-2026-126319

The software Dockhand before version 1.0.55 is vulnerable to an arbitrary file read vulnerability. Authenticated users possessing the stacks:create permission can exploit this by supplying an arbitrary composePath during the stack adoption process. This allows an attacker to read sensitive files—...

CVE-2026-126321

Versions of Dockhand before 1.0.55 are vulnerable to a path traversal flaw in the file-browser endpoints. Authenticated users with stacks:edit privileges can bypass path guards by combining symlinks with .. sequences. This allows attackers to read sensitive files such as /proc/self/environ, the S...

CVE-2026-121449

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

CVE-2026-121448

Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/name/env/raw to disclose cross-environment...

CVE-2026-121449

Versions of Dockhand from 1.0.47 before 1.0.54 are vulnerable to a Secret Disclosure flaw via the Git stack webhook . The root cause is that the deployStack() function attaches resolved secret values to its result as resolvedSecrets, which the Git-stack routes then return unfiltered. Attackers wh...

CVE-2026-121449 Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

CVE-2026-121449 Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

CVE-2026-121449 Dockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack Webhook

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

EUVD-2026-115871

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

CVE-2026-121448 Dockhand before 1.0.54 Path Traversal via Stack Environment Routes

Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/name/env/raw to disclose cross-environment...

CVE-2026-121448 Dockhand before 1.0.54 Path Traversal via Stack Environment Routes

Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/name/env/raw to disclose cross-environment...

EUVD-2026-115870

Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/name/env/raw to disclose cross-environment...

CVE-2026-121448

Dockhand versions prior to 1.0.54 are vulnerable to a path traversal vulnerability (CWE-22) within the stack environment routes. Authenticated users can exploit this by double-encoding the stack name, specifically using %252e%252e sequences in the /api/stacks/[name]/env/raw endpoint. This flaw al...

CVE-2026-121448 Dockhand before 1.0.54 Path Traversal via Stack Environment Routes

Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/name/env/raw to disclose cross-environment...

CVE-2026-121449: Finsys dockhand: Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack() attaches resolved secret…

Dockhand from 1.0.47 before 1.0.54 exposes plaintext stack secrets because deployStack attaches resolved secret values to its result as resolvedSecrets, which Git-stack routes return unfiltered. Holders of a stack's webhook secret or users with stacks:start permission can trigger the Git stack...

CVE-2026-121448: Finsys dockhand: Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and…

Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/name/env/raw to disclose cross-environment...

CVE-2026-113354

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, an...

CVE-2026-113354

Versions of Dockhand prior to 1.0.46 are vulnerable to an arbitrary file read vulnerability via the /api/system/files/content endpoint. This issue stems from incorrect authorization (CWE-863), allowing non-admin users possessing stacks:edit permissions to access files by supplying absolute paths....

CVE-2026-113354 Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, an...