Skip to content
OpenAdvisories

Vendor

Quenary

7 known vulnerabilities.

Products

tugtainer 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-87004 Public exploit

    Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification

    Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/auth_oidc_provider.py decodes the id_token returned by the identity provider's token endpoi…

    Quenary tugtainer
  • High 8.1
    CVE-2026-23846

    Tugtainer vulnerable to Password Exposure via URL Query Parameter

    Tugtainer is a self-hosted app for automating updates of Docker containers. In versions prior to 1.16.1, the password authentication mechanism transmits passwords via URL query parameters instead of the HTTP request body. This causes passwords to be logged in…

    Quenary tugtainer
  • High 8.1
    CVE-2025-69201

    Tugtainer has RCE in Agent Command Execution Api

    Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected in tugtainer-agent `POST api/command/run`. Version 1.15.1 fixes the issue.

    Quenary tugtainer