CyberRota Analysis
AI-GeneratedDokploy versions prior to 0.29.13 are vulnerable to a critical command injection flaw that allows authenticated users to execute arbitrary commands on local or SSH-connected target servers due to improper handling of the password field in the command execution process. This vulnerability poses a significant risk to system integrity and confidentiality, making it essential for organizations using Dokploy to prioritize upgrading to version 0.29.13 or later to mitigate potential exploitation. Users managing Docker environments with Dokploy should take immediate action to secure their installations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy allows an authenticated user to execute arbitrary commands on a local or SSH-connected target server because registry.testRegistry and registry.testRegistryById in apps/dokploy/server/api/routers/registry.ts interpolate the password field into an execAsyncRemote shell command instead of using safeDockerLoginCommand. This issue is fixed in version 0.29.13.