CVE-2026-73040 louislam CVE debrief

Who should care

Administrators and users of the Dockge application should be aware of this vulnerability and take steps to mitigate it. This includes reviewing and validating the application configuration, implementing additional authentication and authorization checks, and monitoring the application for suspicious activity.

Why it matters

CVE-2026-73040 is a high-severity vulnerability in the Dockge application that allows authenticated users to disclose sensitive information and delete arbitrary directories. The vulnerability is caused by a path traversal issue and can be exploited without additional authentication when disableAuth is configured. Administrators and users of the Dockge application should be aware of this vulnerability and take steps to mitigate it.

• Authenticated users can disclose sensitive information in .env or Compose files.
• Authenticated users can delete arbitrary directories.
• The vulnerability can be exploited without additional authentication when disableAuth is configured.
• The reachable set includes unrelated applications on the host when Dockge runs as root with access to the Docker socket.

Technical summary

The Dockge application is vulnerable to a path traversal attack due to an unvalidated stack name. An authenticated user can read the composeENV and composeYAML values of any directory the server process can reach, disclosing secrets in that directory's .env or Compose file, and can invoke delete(), removing that directory. The vulnerability can be exploited without additional authentication when disableAuth is configured. The reachable set includes unrelated applications on the host when Dockge runs as root with access to the Docker socket.

Defensive priority

High

Recommended defensive actions

• Review and validate the Dockge application configuration to ensure that it is properly secured.
• Implement additional authentication and authorization checks to prevent unauthorized access to sensitive directories and files.
• Monitor the Dockge application for suspicious activity and implement logging and auditing to detect potential security incidents.
• Apply patches or updates provided by the vendor to fix the vulnerability.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, which is caused by a path traversal issue in the Dockge application. An authenticated user can read the composeENV and composeYAML values of any directory the server process can reach, disclosing secrets in that directory's .env or Compose file, and can invoke delete(), removing that directory.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.