Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-110255

Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or cloud metadata endpoints and read the fetched content from the compose response field, exposing credentials and tokens.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Finsys dockhand

Default version status: unaffected

  • 0 to < 1.0.43affected
  • 1.0.43unaffected
pkg:github/Finsys/dockhand

References