CVE-2026-57169: CWE-306: Missing Authentication for Critical Function in Finsys dockhand
Description
Dockhand, a Docker management application by Finsys, has a critical vulnerability (CVE-2026-57169) in versions prior to 1.0.34. The vulnerability is due to missing authentication enforcement on the WebSocket upgrade request for the in-browser container terminal endpoint (/api/containers/<id>/exec). An unauthenticated attacker with network access and knowledge of a container ID can open a raw WebSocket terminal session and execute commands inside that container. This can lead to unauthenticated command execution within the container and potential host compromise if the container has sensitive mounts or privileged execution. The issue is fixed in version 1.0.34.
CVSS v3.1
Score 9.6critical
Affected software
Finsys
dockhand
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-57169 describes a missing authentication vulnerability in Finsys dockhand's in-browser container terminal endpoint prior to version 1.0.34. Specifically, the WebSocket upgrade request at /api/containers/<id>/exec does not enforce authentication, allowing unauthenticated attackers with network reach and knowledge of a container ID to open a raw WebSocket terminal session. This enables command execution inside the targeted container without authentication, potentially leading to host compromise when containers have sensitive mounts or privileged execution. The vulnerability has a CVSS 3.1 score of 9.6 (critical) and is addressed by updating to dockhand version 1.0.34 or later.
Potential Impact
The vulnerability allows unauthenticated remote attackers to execute arbitrary commands inside a container managed by dockhand if they know the container ID and have network access. This can lead to full container compromise and potentially host system compromise if the container has sensitive mounts or runs with elevated privileges. The impact includes complete confidentiality, integrity, and availability loss as indicated by the CVSS score.
Mitigation Recommendations
Upgrade dockhand to version 1.0.34 or later, where this authentication enforcement issue is fixed. No other mitigations are specified or required once the official fix is applied.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-24T01:47:55.285Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ad252552cdf04f6560adcdd
Added to database: 10/16/2026, 16:35:33 UTC
Last enriched: 10/16/2026, 16:48:26 UTC
Last updated: 10/16/2026, 16:49:21 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.