Ce mail provient de l'extérieur, restons vigilants

=====================================================================


                            CERT-Renater

                Note d'Information No. 2026/VULN1029
_____________________________________________________________________

DATE                : 15/10/2026

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Dokku versions prior to
                                      0.38.25.

====================================================================
https://github.com/dokku/dokku/security/advisories/GHSA-fccf-j7qf-2xp9
_____________________________________________________________________

Host Command Execution via eval of Unsanitized Docker Options in
DOCKER_ARGS

Critical	josegonzalez published GHSA-fccf-j7qf-2xp9 

Package
dokku

Affected versions
< 0.38.24

Patched versions
0.38.25


Description

Impact
The docker-options plugin allows any user with app-level dokku access
to store arbitrary strings as Docker options. These strings are later
concatenated into the DOCKER_ARGS shell variable and expanded via Bash
eval without any sanitization. Because eval performs command substitution, 
an user with remote ssh access to executing docker-options commands can
inject $(...) or backtick expressions that execute arbitrary commands on
the host as the dokku user during build, deploy, or run operations.

Patches
#8848

Severity
Critical
9.0/ 10

CVSS v3 base metrics
Attack vector
Network
Attack complexity
Low
Privileges required
Low
User interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CVE ID
CVE-2026-86002

Weaknesses
No CWEs

Credits
@ThemeHackers ThemeHackers
Reporter

=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================