Dokploy vulnerabilities
59 CVEs and advisories name Dokploy as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116068Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router
- CVE-2026-111331Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router
- CVE-2026-93425Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root
- CVE-2026-86059Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one
- CVE-2026-45791Dokploy: Password Change Does Not Revoke Active Sessions
- CVE-2026-45790Dokploy: Invitation Role Escalation Allows Organization Takeover
- CVE-2026-72902Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById
- CVE-2026-72901Dokploy: Remote Code Execution via volume-backup
- CVE-2026-72886Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)
- CVE-2026-72885Dokploy: Authenticated Command Injection in Dokploy Dockerfile Builder
- CVE-2026-72884Dokploy: Command Injection via Compose Custom Command
- CVE-2026-72883Dokploy: WebSocket Terminal Missing Service-Level Access Control
- CVE-2026-72882Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers
- CVE-2026-72881Dokploy: Command Injection via database credentials in backup/restore commands
- CVE-2026-72880Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`
- CVE-2026-72879Dokploy: Command Injection via Registry Credentials in Swarm Upload
- CVE-2026-72878Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments
- CVE-2026-72877Dokploy: Command Injection via dockerImage in buildRemoteDocker
- CVE-2026-72876Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*
- CVE-2026-72875Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile
- CVE-2026-72874Dokploy: Command Injection via Unescaped Git URL in Clone Commands
- CVE-2026-72873Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`
- CVE-2026-72872Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`
- CVE-2026-72871Dokploy: Unauthenticated Git Provider Injection via GitHub OAuth Callback
- CVE-2026-72870Dokploy: Command Injection via Docker Credentials in buildRemoteDocker
- CVE-2026-72869Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE
- CVE-2026-72868Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection
- CVE-2026-72867Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)
- CVE-2026-72866WebSocket Terminal Auth Bypass
- CVE-2026-72865Dokploy: OS Command Injection via compose `composePath`