Tugtainer: Authenticated server-side request forgery in notification test
Summary
Tugtainer versions before 1.30.6 contain a server-side request forgery (SSRF) in the notification test endpoint /settings/test_notification. An authenticated user can make the server send requests to arbitrary URLs, including internal hosts, localhost and cloud metadata addresses, because the urls field is passed to Apprise without restrictions. The attack is blind, so the attacker does not directly see the responses. Exploitation requires a valid login.
Affected
- Tugtainer versions before 1.30.6 (< 1.30.6)
Fixed in
- Version 1.30.6 (vendor fix, released 26 Jun 2026)
- Upgrade to the current stable release if possible
Workaround
- No vendor workaround published.
- Restrict which accounts can log in to Tugtainer.
- Keep the web UI off the internet and behind VPN or SSO.
- Block container egress to internal networks and 169.254.169.254 at host or network level.
- Disable notification testing if it is not used.
Exploitation
- CISA KEV: not listed.
- Some third-party sources report a public proof of concept, but sources disagree and these reports were not verified.
- Some sources report a chain with CVE-2026-55494 (unauthenticated agent API access) that leads to code execution in version 1.30.2. This is unverified.
- No confirmed in-the-wild exploitation found in the sources.
Our recommendation
- Update Tugtainer to version 1.30.6 or later without delay.
- Check CVE-2026-55494 as well and patch it too.
- Limit login accounts to trusted administrators and review existing accounts.
- Do not expose the web UI to the internet.
- Check whether the container has access to the Docker socket and which internal services it can reach.
- Monitor outbound connections from the Tugtainer container for unexpected destinations.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Fix commit c0294d0 (GitHub) github.com
- Release v1.30.6 (GitHub) github.com
- Security advisory GHSA-c2h5-ppv9-7vrq (GitHub) github.com
- OSV: CVE-2026-62308 osv.dev
- OpenCVE: CVE-2026-62308 app.opencve.io
- Strix: CVE-2026-62308 www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 07:54.
Original description (NVD)
Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs through the notification test endpoint. The /settings/test_notification endpoint accepts a urls field and passes it directly to Apprise without restricting protocols, hostnames, localhost addresses, private IP ranges, or cloud metadata addresses. This can be abused as an authenticated blind server-side request forgery (SSRF). This issue has been patched in version 1.30.6.
NVD references (4)
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.