CVE-2026-53988

Name of the Vulnerable Software and Affected Versions Dockhand versions prior to 1.0.40

Description An authentication bypass exists in the git webhook endpoints due to a null webhook secret guard condition. This allows unauthenticated remote attackers to trigger arbitrary stack redeployments by enumerating sequential stack IDs and sending unsigned webhook requests to force git clone and docker compose operations. This can lead to a denial of service or, if the attacker has write access to the tracked git branch, result in container escape and full host compromise through a malicious docker-compose.yml file utilizing privileged bind mounts.

Recommendations Update to version 1.0.40.