CVE-2026-53989: Dockhand < 1.0.36 Open Redirect via OIDC Initiation Endpoint
Dockhand before 1.0.36 contains an open redirect vulnerability in the OIDC initiation endpoint that allows unauthenticated remote attackers to redirect authenticated users to attacker-controlled sites by injecting an unvalidated redirect query parameter. Attackers can craft a malicious link targeting the OIDC callback flow to capture authorization codes via the Referer header and conduct follow-up credential phishing against any Dockhand account after a legitimate login.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
Dockhand versions before 1.0.36 are affected. The vulnerable component is the OIDC initiation endpoint.
What must an attacker do to exploit this issue?
An unauthenticated remote attacker must persuade a user to follow a crafted link targeting the OIDC callback flow. Exploitation relies on an unvalidated redirect query parameter and user interaction.
What could an attacker obtain or do after successful exploitation?
The redirect can send an authenticated user to an attacker-controlled site, where authorization codes may be exposed through the Referer header. The attacker can then use the flow for follow-up credential phishing against Dockhand accounts.
How can this be remediated?
Upgrade Dockhand to version 1.0.36 or later. The provided release reference identifies v1.0.36 as the fixed release.