CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.13 are vulnerable due to improper handling of user-controlled inputs in shell commands, specifically in the registry credential testing and Docker Swarm cluster management endpoints. This flaw allows remote attackers to execute arbitrary commands via SSH, posing a critical risk to system integrity and security. Organizations using Dokploy for PaaS should prioritize upgrading to version 0.29.13 to mitigate this severe vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy passes user-controlled values directly into shell commands via unquoted template literal interpolation in the registry credential testing and Docker Swarm cluster management endbpoints. Both endpoints have a safe local code path (using execFileAsync or the Docker API) but a vulnerable remote path (using execAsyncRemote which runs the shell string via SSH). This vulnerability is fixed in 0.29.13.