Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret

Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

Dokploy Settings application.ts writeTraefikConfigInPath path traversal

Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById

Dokploy: Remote Code Execution via volume-backup

Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers

Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`

Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*

Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`

Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE

Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection

Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)

Dokploy: OS Command Injection via compose `composePath`

Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)

Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host

Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE

Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`

Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter

Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE

Dokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution

Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore

Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint

Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution

Dokploy: Command Injection in /docker-container-logs Endpoint

Dokploy: Remote Code Execution through Path Traversal

Dokploy: Remote Code Execution via destinationPath in Container File Upload

Dokploy has Command Injection in its Service Operations

Dokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint

Dokploy's Preview Deployments are vulnerable to Remote Code Execution

Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments

Dokploy: Command Injection via dockerImage in buildRemoteDocker

Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups

Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline

Dokploy: Command Injection via Registry Credentials in Swarm Upload

Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement