DO
Vendor
Dokploy
60
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116068 New | DO dokploy Dokploy | 8.8 | Oct 25 | Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router |
| CVE-2026-111331 | DO Dokploy Dokploy | 6.3 | Oct 15 | Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router |
| CVE-2026-93425 | DO dokploy Dokploy | 9.9 | Sep 24 | Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root |
| CVE-2026-86059 | DO dokploy Dokploy | 9.6 | Sep 22 | Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one |
| CVE-2026-82954 | DO Dokploy Dokploy | 9.9 | Aug 31 | Dokploy Settings application.ts writeTraefikConfigInPath path traversal |
| CVE-2026-45791 | DO dokploy Dokploy | 5.9 | Aug 17 | Dokploy: Password Change Does Not Revoke Active Sessions |
| CVE-2026-45790 | DO dokploy Dokploy | 8.0 | Aug 17 | Dokploy: Invitation Role Escalation Allows Organization Takeover |
| CVE-2026-72902 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById |
| CVE-2026-72901 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Remote Code Execution via volume-backup |
| CVE-2026-72886 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632) |
| CVE-2026-72885 | DO dokploy Dokploy | 0.0 | Aug 10 | Dokploy: Authenticated Command Injection in Dokploy Dockerfile Builder |
| CVE-2026-72884 | DO dokploy Dokploy | 8.7 | Aug 10 | Dokploy: Command Injection via Compose Custom Command |
| CVE-2026-72883 | DO dokploy Dokploy | 8.8 | Aug 10 | Dokploy: WebSocket Terminal Missing Service-Level Access Control |
| CVE-2026-72882 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers |
| CVE-2026-72881 | DO dokploy Dokploy | 6.4 | Aug 10 | Dokploy: Command Injection via database credentials in backup/restore commands |
| CVE-2026-72880 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath` |
| CVE-2026-72879 | DO dokploy Dokploy | 9.4 | Aug 10 | Dokploy: Command Injection via Registry Credentials in Swarm Upload |
| CVE-2026-72878 | DO dokploy Dokploy | 9.6 | Aug 10 | Dokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments |
| CVE-2026-72877 | DO dokploy Dokploy | 9.6 | Aug 10 | Dokploy: Command Injection via dockerImage in buildRemoteDocker |
| CVE-2026-72876 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.* |
| CVE-2026-72875 | DO dokploy Dokploy | 8.8 | Aug 10 | Dokploy: Remote Code Execution (RCE) via Command Injection in settings.readTraefikFile |
| CVE-2026-72874 | DO dokploy Dokploy | 8.7 | Aug 10 | Dokploy: Command Injection via Unescaped Git URL in Clone Commands |
| CVE-2026-72873 | DO dokploy Dokploy | 6.5 | Aug 10 | Dokploy: Cross-tenant Git provider secrets are disclosed to low-privileged service readers via `application.one` |
| CVE-2026-72872 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone` |
| CVE-2026-72871 | DO dokploy Dokploy | 7.5 | Aug 10 | Dokploy: Unauthenticated Git Provider Injection via GitHub OAuth Callback |
| CVE-2026-72870 | DO dokploy Dokploy | 8.7 | Aug 10 | Dokploy: Command Injection via Docker Credentials in buildRemoteDocker |
| CVE-2026-72869 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE |
| CVE-2026-72868 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection |
| CVE-2026-72867 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts) |
| CVE-2026-72866 | DO dokploy Dokploy | 8.8 | Aug 10 | WebSocket Terminal Auth Bypass |
| CVE-2026-72865 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: OS Command Injection via compose `composePath` |
| CVE-2026-72864 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers) |
| CVE-2026-72863 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host |
| CVE-2026-72862 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE |
| CVE-2026-72740 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan` |
| CVE-2026-72739 | DO dokploy Dokploy | 6.5 | Aug 10 | Dokploy: Command Injection via Compose Shell Execution |
| CVE-2026-72738 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter |
| CVE-2026-72737 | DO dokploy Dokploy | 9.6 | Aug 10 | Dokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups |
| CVE-2026-72736 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE |
| CVE-2026-72735 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution |
| CVE-2026-72734 | DO dokploy Dokploy | 8.4 | Aug 10 | Dokploy: Cross-organization authorization bypass in server.remove allows deletion of another organization's server registration |
| CVE-2026-72733 | DO dokploy Dokploy | 9.9 | Aug 10 | Dokploy: OS Command Injection via `databaseName` / `backupFile` in database restore |
| CVE-2026-45629 | DO dokploy Dokploy | 9.9 | May 29 | Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint |
| CVE-2026-43917 | DO dokploy Dokploy | 5.3 | May 29 | Dokploy: Cross-Organization IDOR - Multiple tRPC endpoints missing activeOrganizationId validation |
| CVE-2026-45628 | DO dokploy Dokploy | 9.6 | May 29 | Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline |
| CVE-2026-45630 | DO dokploy Dokploy | 9.0 | May 29 | Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement |
| CVE-2026-45631 | DO dokploy Dokploy | 10.0 | May 29 | Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret |
| CVE-2026-45632 | DO dokploy Dokploy | 9.9 | May 29 | Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution |
| CVE-2026-45633 | DO dokploy Dokploy | 9.9 | May 29 | Dokploy: Command Injection in /docker-container-logs Endpoint |
| CVE-2026-45661 | DO dokploy Dokploy | 9.9 | May 29 | Dokploy: Remote Code Execution through Path Traversal |
| CVE-2026-45662 | DO dokploy Dokploy | 8.8 | May 29 | Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion) |
| CVE-2026-45663 | DO dokploy Dokploy | 9.9 | May 29 | Dokploy: Remote Code Execution via destinationPath in Container File Upload |
| CVE-2026-27130 | DO dokploy Dokploy | 9.9 | May 18 | Dokploy has Command Injection in its Service Operations |
| CVE-2026-24841 | DO dokploy Dokploy | 9.9 | Jan 28 | Dokploy Vulnerable to Authenticated Remote Code Execution via Command Injection in Docker Container Terminal WebSocket Endpoint |
| CVE-2026-24840 | DO dokploy Dokploy | 8.8 | Jan 28 | Dokploy uses hardcoded credentials in installation script, which could result in database access |
| CVE-2026-24839 | DO dokploy Dokploy | 6.1 | Jan 28 | Dokploy has a clickjacking vulnerability - Missing X-Frame-Options and CSP frame-ancestors headers |
| CVE-2025-53825 | DO dokploy Dokploy | 9.8 | Jul 14 | Dokploy's Preview Deployments are vulnerable to Remote Code Execution |
| CVE-2025-53375 | DO dokploy Dokploy | 6.5 | Jul 7 | Dokploy allows attackers to read any file that the Traefik process user can access |
| CVE-2025-53376 | DO dokploy Dokploy | 8.8 | Jul 7 | Dokploy allows attackers to run arbitrary OS commands on the Dokploy host. |
| CVE-2025-53374 | DO dokploy Dokploy | 4.3 | Jul 7 | Dokploy Improperly Discloses User Information via user.one Endpoint |