Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.2

Dockhand lets unauthenticated users trigger stack redeployments

CVE-2026-53988 · published 19 days ago
Summary

Versions of Dockhand older than 1.0.40 let anyone send specially crafted webhook requests and cause a stack to be redeployed without logging in. This can disrupt services and, if an attacker also controls the linked Git repository, could lead to a full host takeover through a malicious Docker Compose file. Upgrade to Dockhand 1.0.40 or later and configure a strong webhook secret for all webhooks.

Original advisory text
Dockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints
Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumerate sequential stack IDs and send unsigned webhook requests to force git clone and docker compose operations, enabling denial of service or, when combined with write access to the tracked git branch, container escape and full host compromise via attacker-controlled docker-compose.yml with privileged bind mounts.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
9.2 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published29 Sep 2026
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2026-53988 · NVD
CVE-2026-53988 · OSV
Track software like this
Free during beta