Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #12

Critical vulnerability found in Docker update tool Tugtainer

Original: 🚨 CVE-2026-55181 — CVSS 9.4 CRITICAL Tugtainer is a self-hosted app for automating updates of Docker containers. Prior t

A critical vulnerability, CVE-2026-55181 with a CVSS score of 9.4, has been disclosed in Tugtainer, a self-hosted application used to automate updates of Docker containers. Versions before 1.30.3 allow OIDC authentication to be initiated even when OIDC is disabled, potentially letting attackers bypass authentication. Administrators are urged to upgrade to version 1.30.3 or later.

Why now: Self-hosted server admins are discussing the flaw because it exposes widely used Docker management tooling to authentication bypass.

TugtainerCVE-2026-55181Docker

Open on mastodon →

Evidence

• 🚨 CVE-2026-55181 — CVSS 9.4 CRITICAL Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authentication can still be initiated even when OIDC_ENABLED=false. The /auth/oidc/enabled endpoint correctly reports that… · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/513654