Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/auth_oidc_provider.py decodes the id_token returned by the identity provider's token endpoint using jose.jwt.get_unverified_claims() instead of jwt.decode(). This skips signature verification, audience (aud) validation, issuer (iss) validation, and expiry (exp) checking entirely. The extracted claims (email/sub/preferred_username) are then used directly as the user_id for the resulting Tugtainer session. This issue has been patched in version 1.31.3.
CVE-2026-62308 is a critical server-side request forgery (SSRF) vulnerability in Quenary's Tugtainer, a self-hosted app for automating Docker container updates. Versions prior to 1.30.6 allow authenticated users to make the backend server send HTTP requests to arbitrary URLs via the /settings/test_notification endpoint. This endpoint does not restrict protocols, hostnames, localhost, private IP ranges, or cloud metadata addresses, enabling blind SSRF attacks. The vulnerability has been patched in version 1.30.6.
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer Agent allows unauthenticated access to Docker management APIs when AGENT_SECRET is not configured. The Agent uses request signatures to protect its API routes. However, in agent/auth.py, the signature verification function returns successfully if Config.AGENT_SECRET is empty. This causes protected Agent APIs to become accessible without authentication. This issue has been patched in version 1.30.4.
Tugtainer versions prior to 1.30.3 have an improper access control vulnerability where the OIDC authentication flow can be initiated even when OIDC is disabled via configuration. Although the /auth/oidc/enabled endpoint correctly reports OIDC as disabled, a direct request to /auth/oidc/login bypasses this setting, starting the OIDC login flow and redirecting users to the OIDC authorization endpoint. This issue has been fixed in version 1.30.3.
Tugtainer is a self-hosted app for automating updates of Docker containers. Versions prior to 1.30.2 are vulnerable to Server-Side Template Injection (SSTI) in the notification template feature. The `title_template` and `body_template` fields are rendered using an unsandboxed `jinja2.Environment`, allowing any authenticated user to execute arbitrary OS commands as root inside the container. Version 1.30.2 fixes the issue.
CVE-2026-23846 is a high-severity vulnerability in Quenary's tugtainer versions prior to 1.16.1, where password authentication uses HTTP GET requests with sensitive query strings. This insecure design causes passwords to be exposed in server logs, browser history, Referer headers, and proxy logs, risking credential leakage. The vulnerability does not require authentication but does require user interaction, and it affects the confidentiality and integrity of credentials without impacting availability. The issue is patched in version 1.16.1. European organizations using tugtainer for Docker container automation should urgently update to mitigate exposure risks. Countries with significant container adoption and cloud infrastructure usage, such as Germany, France, and the Netherlands, are most likely to be affected.
Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected in tugtainer-agent `POST api/command/run`. Version 1.15.1 fixes the issue.
