tugtainer
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 29, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification
Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint
Tugtainer: Unauthenticated access to Tugtainer Agent Docker management APIs when AGENT_SECRET is unset
Tugtainer: OIDC login remains accessible when OIDC_ENABLED is false
Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution
Tugtainer has RCE in Agent Command Execution Api
Monitor tugtainer in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.