PT-2026-22382 · Beszel · Beszel
Nekros1Xx
·
Published
2026-02-27
·
Updated
2026-03-25
·
CVE-2026-27734
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Beszel versions prior to 0.18.2
Beszel versions 0.18.2 through 0.18.3
Description
Beszel is a server monitoring platform. The platform’s authenticated API endpoints, specifically ''/api/beszel/containers/logs'' and ''/api/beszel/containers/info'', pass the
container query parameter to the agent without proper validation. The agent then uses this parameter to construct Docker Engine API URLs using fmt.Sprintf instead of url.PathEscape. Because Go’s http.Client does not sanitize ../ sequences in URL paths sent over unix sockets, an authenticated user, even with a readonly role, can potentially traverse to arbitrary Docker API endpoints on the agent hosts. This could expose sensitive infrastructure details.Recommendations
Update Beszel to version 0.18.4 or later.
Update Beszel to version 0.18.4 or later.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Beszel