CVE-2025-69201

Published: Dic 29, 2025 Last Modified: Feb 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,1
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A
CRITICAL 9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary arguments can be injected in tugtainer-agent `POST api/command/run`. Version 1.15.1 fixes the issue.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,0006
Percentile
0,2th
Updated

EPSS Score Trend (Last 76 Days)

77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Confidentiality Availability
Potential Impacts:
Execute Unauthorized Code Or Commands
Applicable Platforms
Technologies: AI/ML
Likelihood of Exploit: High
View CWE Details
Application

Tugtainer by Quenary

Product Information
Vendor Quenary
Product Tugtainer
Version Range Affected
To 1.15.1 (exclusive)
cpe:2.3:a:quenary:tugtainer:*:*:*:*:*:docker:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://github.com/Quenary/tugtainer/commit/dbb17d843e30fd7…
https://github.com/Quenary/tugtainer/commit/dbb17d843e30fd7509acf0328c913dcb42f…
https://github.com/Quenary/tugtainer/pull/88
https://github.com/Quenary/tugtainer/pull/88
https://github.com/Quenary/tugtainer/releases/tag/v1.15.1
https://github.com/Quenary/tugtainer/releases/tag/v1.15.1
https://github.com/Quenary/tugtainer/security/advisories/GH…
https://github.com/Quenary/tugtainer/security/advisories/GHSA-grc3-8w5x-g54q