← Back to Dashboard

CVE-2026-113354

MEDIUM NVD
CVSS Score
6.5
Severity
MEDIUM
Source
NVD
Published
Oct 20, 2026
Description

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.

View Full Details ← Back