CVE-2026-110112: falha crítica em Finsys dockhand
Dockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2epss 0.4%
Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
Finsys · dockhandCVEs relacionadas — Finsys dockhand
No mesmo produto, das mais perigosas para as menos.
CVE-2026-110130CRITICALDockhand before 1.0.45 Authentication Bypass via Static-Asset CheckEPSS 0.7%CVE-2026-121448HIGHDockhand before 1.0.54 Path Traversal via Stack Environment RoutesEPSS 0.5%CVE-2026-53988CRITICALDockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook EndpointsEPSS 0.5%CVE-2026-121449HIGHDockhand 1.0.47 before 1.0.54 Secret Disclosure via Git Stack WebhookEPSS 0.4%CVE-2026-113354HIGHDockhand before 1.0.46 Arbitrary File Read via /api/system/files/contentEPSS 0.4%CVE-2026-110256MEDIUMDockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuthEPSS 0.4%