Unrated severityNVD Advisory· Published Nov 6, 2026

CVE-2026-74756

Description

Some docker-compose shipped by the project exposes by default Webadmin REST API publically without proper authentication setup. Version 3.9.1 onward sets a random credential by default on unprotected webadmin endpoints to prevent this while retain convenience.

Affected products

Pypi/Docker Composeinferred
Range: >=3.9.1
Package: https://pypi.org/project/docker-compose

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/5zhn007mc3jz691zhb2687ow2n7f0zp0nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000