CVE-2026-45407
Medium
Description
Dokku is a docker-powered PaaS. Prior to 0.38.2, the git:auth command creates $DOKKU_ROOT/.netrc using bash's touch command, which applies the default umask of 0644. This pre-creation defeats the netrc binary's built-in 0600 permission setting, leaving git credentials readable by any local user who can traverse the dokku home directory. This vulnerability is fixed in 0.38.2.
SeverityMedium
CVSS5.0
Exploit probability—
ProductDokku
PublishedJun 26, 2026
First seenJun 26, 2026
Weakness typeCWE-522CWE-522
How to fix
Update
- dokku dokku0.38.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dokku dokku | v < 0.38.2 | 0.38.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.