CVE-2026-110255

CVSS 8.5 (high) · published 2026-10-13

Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates pointing to internal services or cloud metadata endpoints and read the fetched content from the compose response field, exposing credentials and tokens.

Weakness: CWE-918

Source: NVD CVE-2026-110255

References

• https://github.com/Finsys/dockhand/security/advisories/GHSA-f2mx-74xq-g4p9
• https://www.vulncheck.com/advisories/dockhand-before-1.0.43-ssrf-via-api-templates-compose-endpoint
• https://github.com/Finsys/dockhand/security/advisories/GHSA-f2mx-74xq-g4p9

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.