CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.13 are vulnerable due to improper handling of user-controlled dockerImage fields, which can lead to command injection through unquoted shell commands in the database service deployment functions. This critical vulnerability (CVSS 9.9) allows attackers to execute arbitrary commands on the remote server, potentially compromising the entire system. Organizations using Dokploy should prioritize upgrading to version 0.29.13 or later to mitigate this severe risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the mariadb.ts, mongo.ts, mysql.ts, postgres.ts, redis.ts, and libsql.ts Dokploy database service deployment functions pass user-controlled dockerImage fields unquoted into docker pull ${dockerImage} shell commands on the remote-server code path. This vulnerability is fixed in 0.29.13.