Live › vulnerability › CVE-2026-113354
Go to dashboardDockhand before 1.0.46 lets a non-admin user with stacks:edit permission read any file on the host through the path parameter of /api/system/files/content. An attacker can read /etc/shadow, /etc/passwd, git credentials and SSH keys from the Dockhand container.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running Dockhand before 1.0.46 where some non-admin users hold the stacks:edit permission. Exposure depends on that role assignment, so instances where only admins can edit stacks are at much lower risk.
No product ranges from the sources yet.
1.0.46.stacks:edit permission.1.0.46 or later.stacks:edit from non-admin users and rotate any git credentials or SSH keys stored in the Dockhand container.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.
This page as .md · .json · in your agent: get_signal("CVE-2026-113354")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.