Dokploy vulnerabilities

CVEs per yearBy the year they were published

1. 20254
2. 202655

Newest CVEs

• CVE-2026-116068

  Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router

  Dokploy · dokploy

  High8.7
• CVE-2026-111331

  Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router

  Dokploy · Dokploy

  Medium5.3
• CVE-2026-93425

  Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

  Dokploy · dokploy

  Critical9.9
• CVE-2026-86059

  Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one

  Dokploy · dokploy

  Critical9.6
• CVE-2026-45791

  Dokploy: Password Change Does Not Revoke Active Sessions

  Dokploy · dokploy

  Medium5.9
• CVE-2026-45790

  Dokploy: Invitation Role Escalation Allows Organization Takeover

  Dokploy · dokploy

  High8.0
• CVE-2026-72902

  Dokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById

  Dokploy · dokploy

  Critical9.9
• CVE-2026-72901

  Dokploy: Remote Code Execution via volume-backup

  Dokploy · dokploy

  Critical9.9
• CVE-2026-72886

  Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)

  Dokploy · dokploy

  Critical9.9
• CVE-2026-72885

  Dokploy: Authenticated Command Injection in Dokploy Dockerfile Builder

  Dokploy · dokploy

  None0.0