Dockhand: Path traversal vulnerability (CVE-2026-121448)

Dockhand versions prior to 1.0.54 contain a path traversal vulnerability. Authenticated users can exploit this by providing double-encoded input (e.g., %252e%252e) within the stack name parameter of the /api/stacks/[name]/env/raw endpoint. This allows unauthorized access to sensitive .env files located outside the intended stack root directory.

Impact

Successful exploitation allows authenticated attackers to disclose cross-environment secrets, overwrite critical configuration files, or poison deployment variables by deleting or modifying .env files.

Recommendation

• Upgrade Dockhand to version 1.0.54 or later immediately.
• Audit logs for the /api/stacks/ endpoint to identify attempts containing encoded dot-dot sequences.
• Rotate secrets contained within any .env files that may have been accessible during the period of exposure.