CVE-2026-45633

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.26.7

Description Dokploy is a self-hostable Platform as a Service (PaaS) that contains a command injection issue. Authenticated users can execute arbitrary commands with root privileges via the '/docker-container-logs' WebSocket endpoint. This occurs because the tail and since parameters are not validated and are directly concatenated into shell commands.

Recommendations Update to a version later than 0.26.6. Avoid using the tail and since parameters in the '/docker-container-logs' endpoint until the update is applied.