CVE-2026-126321
Received Received - Intake

Path Traversal in Dockhand Before 1.0.55

Publication date: 2026-11-13

Last updated on: 2026-11-13

Assigner: VulnCheck

Description
Dockhand before 1.0.55 contains a path traversal vulnerability that allows authenticated users with stacks:edit to bypass the file-browser path guard by combining symlinks with '..' sequences. Attackers can read /proc/self/environ, the SQLite database, and the encryption key via /api/system/files/content, or move them using the stack relocate endpoint, exposing stored credentials.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-13
Last Modified
2026-11-13
Generated
2026-11-13
AI Q&A
2026-11-13
EPSS Evaluated
N/A
NVD
CVE-2026-126321
EUVD
EUVD-2026-125199

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
finsys dockhand to 1.0.55 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-126321 is a path traversal vulnerability in Dockhand versions before 1.0.55. It allows authenticated users with stacks:edit permissions to bypass file-browser path guards by combining symbolic links with '..' sequences. This enables reading sensitive files like /proc/self/environ, SQLite databases, and encryption keys, or moving files via the relocate endpoint.

Detection Guidance

Check if Dockhand is running a vulnerable version (<=1.0.54) by inspecting installed packages or container images. Review logs for unusual file access patterns or requests to /api/system/files/content with path traversal sequences like ../. Monitor for unauthorized file reads or moves via the relocate endpoint.

Impact Analysis

Attackers could access or manipulate sensitive data such as database URLs, encryption keys, and stored credentials. In the Enterprise edition, non-administrators could access restricted data, while in the Free edition, broader admin privileges reduce but do not eliminate risk. The vulnerability allows file reads and potential credential exposure.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Exposure of encryption keys, database contents, or credentials risks non-compliance with data security standards.

Mitigation Strategies

Upgrade Dockhand to version 1.0.55 or later immediately. Remove stacks:edit permissions from non-administrative users if using the Enterprise edition. Audit and restrict access to sensitive files like /proc/self/environ, SQLite databases, and encryption keys. Disable the relocate endpoint if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-126321. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...