Siumauricio

An OS command injection exists in the `getComposeContainerCommand()` function. Authenticated organization members can execute shell commands by providing shell metacharacters through the `serviceName` parameter. This is achieved via the `backup.create` or `backup.update` tRPC procedures. The injected commands are executed as root during scheduled backups, potentially allowing the attacker to take over the host through the mounted Docker socket.

The `protectedProcedure` middleware only verifies user authentication but fails to enforce organization scoping. This leads to an Insecure Direct Object Reference (IDOR), where endpoints do not verify if the resource's organization matches the session's `activeOrganizationId`. Affected endpoints include: - In deployment.ts: 'allByType', 'killProcess', and 'removeDeployment' - In rollbacks.ts: 'delete' - In backup.ts: 'create', 'one', 'update', 'remove', 'manualBackupPostgres', 'MySql', 'Mariadb', 'Mongo', 'Compose', 'WebServer', and 'listBackupFiles' - In volume-backups.ts: 'list', 'one', 'delete', 'update', 'runManually', and 'restoreVolumeBackupWithLogs' - In cluster.ts: 'getNodes', 'removeWorker', 'addWorker', and 'addManager' - In mount.ts: 'create'