Finsys vulnerabilities
We track 7 vulnerabilities in Finsys products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Finsys vulnerabilities
- 8.3 High severity
dockhand: Improper Limitation of a Pathname to a Restricted Directory
Dockhand before 1.0.55 contains a path traversal vulnerability that allows authenticated users with stacks:edit to bypass the file-browser path guard by combining symlinks with '..' sequences. Attackers can read /proc/self/environ, the SQLite database, and the
- 8.3 High severity
dockhand: Improper Limitation of a Pathname to a Restricted Directory
Dockhand before 1.0.54 contains a path traversal vulnerability that allows authenticated users to read, overwrite, and delete .env files outside the stacks root by double-encoding the stack name. Attackers can send %252e%252e sequences to /api/stacks/[name]/en
- 9.6 Critical severity
dockhand: Missing Authentication for Critical Functionality
Dockhand is a Docker management application. Prior to 1.0.34, the in-browser container terminal endpoint /api/containers/<id>/exec does not enforce authentication on the WebSocket upgrade request. When an unauthenticated attacker has network reach to Dockhand,
- 8.5 High severity
dockhand: Server-Side Request Forgery
Finsys Dockhand before 1.0.43 contains a response-disclosing server-side request forgery vulnerability that allows authenticated users to make the server fetch arbitrary URLs by supplying repository URL and stackfile values. Attackers can send stack templates
- 10.0 Critical severity
dockhand: Authentication Bypass Using an Alternate Path or Channel
Dockhand before 1.0.45 contains an authentication bypass in which the global auth hook skips authentication for any path ending in a static-asset extension such as .js, including /api/* routes, and the user-mutation handlers fail open for unauthenticated calle
- 8.1 High severity
dockhand: Incorrect Authorization
Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider li
- 10.0 Critical severity
dockhand: Missing Authentication for Critical Functionality
Dockhand before 1.0.40 contains an authentication bypass vulnerability in its git webhook endpoints that allows unauthenticated remote attackers to trigger arbitrary stack redeployments by exploiting a null webhook secret guard condition. Attackers can enumera