dokploy.

Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router

• dokploy
• Broken access control

Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router

• Dokploy
• Broken access control

Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

• dokploy
• Command injection

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

• dokploy
• Information disclosure
• Broken access control

Dokploy Settings application.ts writeTraefikConfigInPath path traversal

• Dokploy
• Path traversal

Dokploy: Password Change Does Not Revoke Active Sessions

• dokploy
• Authentication bypass

Dokploy: Invitation Role Escalation Allows Organization Takeover

• dokploy
• Privilege escalation

Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById

• dokploy
• Command injection

Dokploy: Remote Code Execution via volume-backup

• dokploy
• Command injection

Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

• dokploy
• Privilege escalation
• Broken access control

Dokploy: Authenticated Command Injection in Dokploy Dockerfile Builder

• dokploy
• Command injection

Dokploy: Command Injection via Compose Custom Command

• dokploy
• Command injection

Dokploy: WebSocket Terminal Missing Service-Level Access Control

• dokploy
• Broken access control

Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers

• dokploy
• Command injection

Dokploy: Command Injection via database credentials in backup/restore commands

• dokploy
• Command injection

Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`

• dokploy
• Command injection

Dokploy: Command Injection via Registry Credentials in Swarm Upload

• dokploy
• Command injection

Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments

• dokploy
• Command injection

Dokploy: Command Injection via dockerImage in buildRemoteDocker

• dokploy
• Command injection

Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*

• dokploy
• Command injection
• Broken access control

Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile

• dokploy
• Command injection

Dokploy: Command Injection via Unescaped Git URL in Clone Commands

• dokploy
• Command injection

Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one`

• dokploy
• Information disclosure

Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`

• dokploy
• Command injection

Dokploy: Unauthenticated Git Provider Injection via GitHub OAuth Callback

• dokploy
• Authentication bypass

Dokploy: Command Injection via Docker Credentials in buildRemoteDocker

• dokploy
• Command injection

Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE

• dokploy
• Command injection

Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection

• dokploy
• Command injection
• Broken access control

Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)

• dokploy
• Command injection
• CWE-20

WebSocket Terminal Auth Bypass

• dokploy
• Broken access control

Dokploy: OS Command Injection via compose `composePath`

• dokploy
• Command injection

Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)

• dokploy
• Broken access control

Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host

• dokploy
• Privilege escalation
• Broken access control

Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE

• dokploy
• Command injection

Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`

• dokploy
• Command injection

Dokploy: Command Injection via Compose Shell Execution

• dokploy
• Command injection

Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter

• dokploy
• Command injection

Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups

• dokploy
• Broken access control

Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE

• dokploy
• Command injection

Dokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution

• dokploy
• Command injection

Dokploy: Cross-organization authorization bypass in server.remove allows deletion of another organization's server registration

• dokploy
• Broken access control

Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore

• dokploy
• Command injection

Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint

• dokploy
• Command injection

Dokploy: Cross-Organization IDOR - Multiple tRPC endpoints missing activeOrganizationId validation

• dokploy
• Broken access control

Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline

• dokploy
• Command injection
• CWE-20

Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement

• dokploy
• Command injection

Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret

• dokploy
• Hard-coded credentials

Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution

• dokploy
• Command injection
• Privilege escalation

Dokploy: Command Injection in /docker-container-logs Endpoint

• dokploy
• Command injection

Dokploy: Remote Code Execution through Path Traversal

• dokploy
• Path traversal

Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion)

• dokploy
• Command injection

Dokploy: Remote Code Execution via destinationPath in Container File Upload

• dokploy
• Command injection

Dokploy has Command Injection in its Service Operations

• dokploy
• Command injection

Dokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint

• dokploy
• Command injection

Dokploy uses hardcoded credentials in installation script, which could result in database access

• dokploy
• Hard-coded credentials

Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers

• dokploy
• CWE-1021

Dokploy's Preview Deployments are vulnerable to Remote Code Execution

• dokploy
• Broken access control

Dokploy allows attackers to read any file that the Traefik process user can access

• dokploy
• Path traversal

Dokploy allows attackers to run arbitrary OS commands on the Dokploy host.

• dokploy
• Command injection

Dokploy Improperly Discloses User Information via user.one Endpoint

• dokploy
• Information disclosure
• Broken access control