Mauricio Siu 5563699f71 fix(security): enforce org-scope on swarm reads and escape nodeId ...

swarm.getNodes/getNodeInfo/getNodeApps/getAppInfos accepted a caller-supplied
serverId and ran remote Docker Swarm reads against it with no organization
check, exposing another tenant's swarm topology cross-org (getContainerStats
already had the check; the others did not). getNodeInfo additionally
interpolated nodeId unescaped into 'docker node inspect ${nodeId}'.

Adds an org-ownership assertion to the four unscoped handlers and passes nodeId
through shell-quote in getNodeInfo.

Closes GHSA-jj6h-388v-9rwm

2026-07-19 21:20:47 -06:00

..

server

fix(security): enforce org-scope on swarm reads and escape nodeId

2026-07-19 21:20:47 -06:00