CVE-2021-27886

CRITICAL 9.8CVE-2021-27886 · Published 02/03/2021 · updated 17/06/2026

In short

CVE-2021-27886 is a CRITICAL (CVSS 9.8) vulnerability affecting docker dashboard (docker dashboard project).
Chance of exploitation in the next 30 days (EPSS): 45.6%, higher than 98.8% of all vulnerabilities.
Fix: update to 2021-02-28 or later.

Package	Affected versions	Patched versions
docker dashboard docker_dashboard_project	`< 2021-02-28`	`2021-02-28`

Description

rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command parameter of an API request. NOTE: this is NOT a Docker, Inc. product.

References

packetstormsecurity.com/files/163416/Docker-Dashboard-Remote-Command-Execution.html · Third Party Advisory
rakibtg/docker-web-gui commit 79cdc41 · Patch
rakibtg/docker-web-gui · Third Party Advisory
docker.com/legal/trademark-guidelines · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free