CVE-2021-27886: Docker Dashboard Project Docker Dashboard

Critical severity, CVSS 9.8. EPSS: 45.6% chance of exploitation in the next 30 days.

rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command parameter of an API request. NOTE: this is NOT a Docker, Inc. product.

Affected products

• Docker Dashboard Project Docker Dashboard: before 2021-02-28 (fixed in 2021-02-28)

Published 2021-03-02. Last modified 2026-06-17.