CVE-2026-113354highCWE-863

CVE-2026-113354: high-severity vulnerability in Finsys dockhand

Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content

Published · Updated

Follow this CVE+ Monitor dockhand

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 0.4%
Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
Finsys · dockhand
Related CVEs — Finsys dockhand

In the same product, most dangerous first.

CVE-2026-110130CRITICALDockhand before 1.0.45 Authentication Bypass via Static-Asset CheckEPSS 0.7%CVE-2026-53988CRITICALDockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook EndpointsEPSS 0.5%CVE-2026-110112CRITICALDockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim ValidationEPSS 0.4%CVE-2026-110256MEDIUMDockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuthEPSS 0.4%CVE-2026-57169CRITICALDockhand: Unauthenticated container exec via WebSocket upgradeEPSS 0.3%CVE-2026-110255HIGHDockhand before 1.0.43 SSRF via /api/templates/compose EndpointEPSS 0.3%