CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.6 are vulnerable due to a flaw in the organization.inviteMember tRPC procedure, which permits users with member:create permissions to invite accounts with owner roles. This vulnerability allows a privileged user to create accounts with arbitrary roles, potentially leading to permanent organization takeover, as owner roles cannot be demoted. Organizations using Dokploy should prioritize upgrading to version 0.29.6 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/organization.ts allows a user with member:create permission to invite an account with the owner role, while packages/server/src/services/user.ts allows a privileged self-hosted user to create an account with an arbitrary role, enabling permanent organization takeover because owner roles cannot be demoted. This issue is fixed in version 0.29.6.