Is CVE-2026-113354 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-113354?

CVE-2026-113354 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-113354

Description

Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read /etc/shadow, /etc/passwd, git .git/config credentials, and SSH keys from the Dockhand container.