CyberRota Analysis
AI-GeneratedDokploy versions 0.29.2 to 0.29.12 are vulnerable due to improper access control in the schedule.create and schedule.update functions, allowing unauthorized users to execute scripts with root privileges by manipulating application identifiers. This critical vulnerability poses a significant risk to any organization using affected versions, as it could lead to unauthorized system access and potential compromise of sensitive data. Users of Dokploy should prioritize upgrading to version 0.29.13 or later to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/admin host-schedule gate only in the alternative branch, allowing a member with access to one application to attach its applicationId to a dokploy-server schedule and run a supplied script as root through schedule.runManually. This issue is fixed in version 0.29.13.