CVE-2026-129433

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.31.1

Description An OS command injection exists in the getComposeContainerCommand() function. Authenticated organization members can execute shell commands by providing shell metacharacters through the serviceName parameter. This is achieved via the backup.create or backup.update tRPC procedures. The injected commands are executed as root during scheduled backups, potentially allowing the attacker to take over the host through the mounted Docker socket.

Recommendations Update to version 0.31.1.