CVE-2026-69096 | OpenWrt luci-app-dockerman RPC Backend docker_rpc.uc docker.container.ttyd_start ID os command injection

A vulnerability was found in OpenWrt luci-app-dockerman. It has been classified as very critical. Affected is the function docker.container.ttyd_start of the file docker_rpc.uc of the component RPC Backend. Performing a manipulation of the argument ID results in os command injection.

This vulnerability was named CVE-2026-69096. The attack may be initiated remotely. There is no available exploit.