CVE-2026-110112

Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation in Dockhand via OIDC Claim Validation Bypass

Publication date: 2026-10-13

Last updated on: 2026-10-17

Assigner: VulnCheck

Description

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate the mapped admin group and log in as Dockhand administrators.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-17

Generated

2026-10-19

AI Q&A

2026-10-14

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110112

EUVD

EUVD-2026-100464

Affected Vendors & Products

Vendor	Product	Version / Range
Finsys	dockhand	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

Dockhand before version 1.0.50 has a privilege escalation vulnerability due to missing validation of OIDC token claims like issuer, audience, nonce, and expiration. Attackers with admin rights in another tenant of a shared provider such as Microsoft Entra ID can recreate the mapped admin group and gain admin access to Dockhand.

Detection Guidance

To detect this vulnerability, check if your Dockhand instance is running a version before 1.0.50. Use commands like 'dockhand --version' or inspect package metadata. Verify OIDC token validation for issuer, audience, nonce, and expiration claims in authentication logs.

Impact Analysis

An attacker could impersonate a Dockhand administrator, gaining unauthorized access to sensitive data or administrative functions. This could lead to data breaches, unauthorized modifications, or complete system compromise in multi-tenant environments.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access control. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Upgrade Dockhand to version 1.0.50 or later to address the missing OIDC token claim validation. Ensure proper validation of issuer, audience, nonce, and expiration claims in multi-tenant setups.

Hi! I’m here to help you understand CVE-2026-110112. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70