CVE-2026-55181

9.4 CRITICALpublic exploit available

Published 2026-09-30 · Updated 2026-09-30

AI risk analysis

Summary: The flaw allows an attacker to bypass the OIDC disable switch in Tugtainer, initiating the OIDC login flow even when OIDC is supposed to be disabled, leading to unauthorized access.
Exploitability: Exploitation is relatively easy as it requires a direct request to the /auth/oidc/login endpoint, which can be done by an attacker who has access to the application.
Blast radius: If exploited, this could lead to unauthorized access and potential control over the Docker containers managed by Tugtainer, with high impact on system security.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to version 1.30.3 or later.

auth-bypasswebdocker

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer's OIDC authentication can still be initiated even when OIDC_ENABLED=false. The /auth/oidc/enabled endpoint correctly reports that OIDC is disabled. However, a direct request to /auth/oidc/login still starts the OIDC login flow, returns HTTP 302, sets an oidc_state cookie, and redirects the user to the configured OIDC authorization endpoint. This bypasses the intended OIDC disable switch. This issue has been patched in version 1.30.3.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Weaknesses

CWE-284

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.