CVE-2026-113354Published
Dockhand before 1.0.46 Arbitrary File Read via /api/system/files/content
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-113354 · Microsoft / collected KEV context
cve-program · CVE-2026-113354
- https://github.com/Finsys/dockhand/security/advisories/GHSA-433w-5hff-22h6
- https://github.com/Finsys/dockhand/commit/5af4e69eb20bde4b84756eb600bd521c8d300fb5
- https://github.com/Finsys/dockhand/releases/tag/v1.0.46
- https://github.com/Finsys/dockhand/blob/5adb374c0d79c8df0f8524f6c7fe27bbc493a1dc/src/routes/api/system/files/content/%2Bserver.ts
- https://www.vulncheck.com/advisories/dockhand-before-1.0.46-arbitrary-file-read-via-api-system-files-content
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.