CVE-2026-72875

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.13

Description Dokploy is a self-hostable Platform as a Service (PaaS). A flaw exists where the settings.readTraefikFile endpoint in apps/dokploy/server/api/routers/settings.ts passes a path to the readConfigInPath function in packages/server/src/utils/traefik/application.ts. This path is then interpolated into the execAsyncRemote function as cat ${configPath}, which allows a user with traefikFiles.read permission to execute arbitrary commands on a managed server by using shell metacharacters.

Recommendations Update to version 0.29.13.