CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.13 are vulnerable to a critical command injection flaw in the git URL parsing functionality, which allows authenticated users with deployment permissions to execute arbitrary commands on the host system during deployment. This vulnerability poses a significant risk as it can lead to unauthorized access and control over the Dokploy environment. Organizations using Dokploy should prioritize upgrading to version 0.29.13 to mitigate this security threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, packages/server/src/utils/providers/git.ts parses the user-controlled customGitUrl with sanitizeRepoPathSSH and interpolates its domain into the ssh-keyscan command from addHostToKnownHostsCommand without shell quoting, allowing an authenticated member with service deployment permission and an attached SSH key to execute arbitrary commands on the Dokploy host during deployment. This issue is fixed in version 0.29.13.