CyberRota Analysis
AI-GeneratedThe vulnerability affects Dokploy, specifically the buildRemoteDocker() function, which improperly interpolates user-controlled dockerImage values into shell commands, allowing authenticated users with project access to execute arbitrary operating-system commands on the Dokploy server. This could lead to severe security breaches, including unauthorized access and control over the server environment. Organizations using Dokploy versions prior to 0.29.13 should prioritize updating to the latest version to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the buildRemoteDocker() function in packages/server/src/utils/providers/docker.ts interpolates the application-controlled dockerImage value directly into a docker pull shell command. An authenticated user with project access can set a crafted dockerImage through application.update and trigger application.deploy, causing execAsync() to execute arbitrary operating-system commands as the Dokploy server process. This issue is fixed in version 0.29.13.