PT-2026-69881 · Dokploy · Dokploy
CVE-2026-72736
·
Published
2026-08-10
·
Updated
2026-08-10
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Dokploy versions prior to 0.29.13
Description
Dokploy passes user-controlled values directly into shell commands through unquoted template literal interpolation. This occurs within the registry credential testing and Docker Swarm cluster management endpoints. While local code paths utilizing
execFileAsync() or the Docker API are secure, the remote path using execAsyncRemote() is susceptible because it executes shell strings via SSH.Recommendations
Update to version 0.29.13.
Exploit
Fix
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Dokploy