Login Request a demo
Medium severity · published Oct 20, 2026
CVE-2026-113354
Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DO
dockhand · Finsys
before 1.0.46 · source: vendor
Affected product
DO
dockhand
Finsys
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-113354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-113354
github.com
https://github.com/Finsys/dockhand/blob/5adb374c0d79c8df0f8524f6c7fe27bbc493a1dc/src/routes/api/system/files/content/%2Bserver.ts
github.com
https://github.com/Finsys/dockhand/commit/5af4e69eb20bde4b84756eb600bd521c8d300fb5
github.com
https://github.com/Finsys/dockhand/releases/tag/v1.0.46
github.com
https://github.com/Finsys/dockhand/security/advisories/GHSA-433w-5hff-22h6
www.vulncheck.com
https://www.vulncheck.com/advisories/dockhand-before-1.0.46-arbitrary-file-read-via-api-system-files-content
More from dockhand
10.0
CVE-2026-110130
Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check
10.0
CVE-2026-53988
Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints
9.6
CVE-2026-57169
Dockhand: Unauthenticated container exec via WebSocket upgrade
8.5
CVE-2026-110255
Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
8.1
CVE-2026-110112
Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation