CVE-2026-116068

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.30.11

Description An authorization bypass allows owners or administrators of any organization to control applications belonging to other tenants by providing foreign applicationId values. This allows unauthorized users to execute procedures such as saveEnvironment(), updateTraefikConfig(), deploy(), and stop(). Consequently, attackers can overwrite environment variables and build secrets, repoint sources, and disrupt the operations of other tenants' applications.

Recommendations Update Dokploy to version 0.30.11 or later.