CVE-2026-110255
Dockhand before 1.0.43 SSRF via /api/templates/compose Endpoint
CVSS Score
8.5
EPSS Score
0.0%
EPSS Percentile
0th
Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or cloud metadata endpoints and read the fetched content from the compose response field, exposing credentials and tokens.
| CWE | CWE-918 |
| Vendor | finsys |
| Product | dockhand |
| Published | Oct 13, 2026 |
| Last Updated | Oct 13, 2026 |
Stay Ahead of the Next One
Get instant alerts for finsys dockhand
Be the first to know when new high vulnerabilities affecting finsys dockhand are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
Low
Availability
None
Affected Versions
Finsys / dockhand
0 < 1.0.43
References
Credits
1491342590