CVE-2026-58455

Name of the Vulnerable Software and Affected Versions Dockwatch versions prior to 0.6.568

Description An unauthenticated OS command injection exists due to a chain of two issues. First, a missing exit() function after an authentication redirect in loader.php allows attackers to seed a required session flag. Second, unsanitized input is passed to the shell exec() function in ajax/compose.php. Remote attackers can exploit this by sending arbitrary commands via the composePath POST parameter in the composePull action. In standard deployments where the Docker socket is mounted, this can lead to full host compromise through container escape.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the ajax/compose.php endpoint or avoid mounting the Docker socket to the container to minimize the risk of host compromise.