Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content

Advisories

Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content

Severity: high
Date: 10/20/2026
Affecting: dockhand >= 0, < 1.0.46
CVE: CVE-2026-113354
CWE: CWE-863 Incorrect Authorization
CVSS: 7.1
CVSS V4 Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
References: GitHub Security Advisory (GHSA-433w-5hff-22h6)
https://github.com/Finsys/dockhand/commit/5af4e69eb20bde4b84756eb600bd521c8d300fb5
dockhand v1.0.46 Release Notes
https://github.com/Finsys/dockhand/blob/5adb374c0d79c8df0f8524f6c7fe27bbc493a1dc/src/routes/api/system/files/content/%2Bserver.ts
Credit: Allan Victor, Bruno Alvarenga
Description: Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.

Vulnerability Prioritization
Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
Early Warning System
Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

Schedule a Demo