Dokploy vulnerabilities
59 CVEs and advisories name Dokploy as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-72864Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)
- CVE-2026-72863Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host
- CVE-2026-72862Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE
- CVE-2026-72740Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`
- CVE-2026-72739Dokploy: Command Injection via Compose Shell Execution
- CVE-2026-72738Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter
- CVE-2026-72737Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups
- CVE-2026-72736Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE
- CVE-2026-72735Dokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution
- CVE-2026-72734Dokploy: Cross-organization authorization bypass in server.remove allows deletion of another organization's server registration
- CVE-2026-72733Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore
- CVE-2026-45629Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint
- CVE-2026-43917Dokploy: Cross-Organization IDOR - Multiple tRPC endpoints missing activeOrganizationId validation
- CVE-2026-45628Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline
- CVE-2026-45630Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement
- CVE-2026-45631Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret
- CVE-2026-45632Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution
- CVE-2026-45633Dokploy: Command Injection in /docker-container-logs Endpoint
- CVE-2026-45661Dokploy: Remote Code Execution through Path Traversal
- CVE-2026-45662Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion)
- CVE-2026-45663Dokploy: Remote Code Execution via destinationPath in Container File Upload
- CVE-2026-27130Dokploy has Command Injection in its Service Operations
- CVE-2026-24841Dokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint
- CVE-2026-24840Dokploy uses hardcoded credentials in installation script, which could result in database access
- CVE-2026-24839Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers
- CVE-2025-53825Dokploy's Preview Deployments are vulnerable to Remote Code Execution
- CVE-2025-53375Dokploy allows attackers to read any file that the Traefik process user can access
- CVE-2025-53376Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.
- CVE-2025-53374Dokploy Improperly Discloses User Information via user.one Endpoint