Skip to content
Threat Feed
Subscribe

Product

Dockhand (< 1.0.45)

1 brief RSS
critical advisory

Authentication Bypass in Dockhand via Static Extension Path Traversal

Dockhand versions prior to 1.0.45 allow unauthenticated remote attackers to perform full account takeover by exploiting an authentication bypass flaw in the global hook that incorrectly permits requests ending in static extensions.

Dockhand authentication-bypass api-vulnerability account-takeover cve-2026-110130
1r 1t 1c