TI-2026-80150 CVE-2026-116070 · GHSA-xxpq-v3jg-w39m
Missing authentication in Docker-Proxy exposes and overwrites config
Priority HIGH 70
Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows unauthenticated attackers to read and overwrite configuration via /api/config.