Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Dokploy allows organization members to get root terminal access

CVE-2026-72883 · published 2 months ago
Summary

The web‑based terminal and monitoring features in Dokploy do not properly verify a user’s permission for each server or service. Because of this, a logged‑in organization member could open a root command line, read logs, or view statistics for servers they are not supposed to access. Install Dokploy version 0.29.13 or later to correct the problem.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
dokploy dokploy < 0.29.13
Original advisory text
Dokploy: WebSocket Terminal Missing Service-Level Access Control
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handlers in apps/dokploy/server/wss/terminal.ts, apps/dokploy/server/wss/docker-container-terminal.ts, apps/dokploy/server/wss/docker-container-logs.ts, and apps/dokploy/server/wss/docker-stats.ts validate organization membership but do not enforce checkServiceAccess, accessedServerIds, or accessedServices, allowing an authenticated organization member to obtain root terminal access and read logs or statistics for restricted servers and services. This issue is fixed in version 0.29.13.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published10 Aug 2026
Updated4 Nov 2026
First seen10 Aug 2026
Sources
CVE-2026-72883 · NVD
CVE-2026-72883 · MITRE
CVE-2026-72883 · OSV
GHSA-qf9j-c9p4-r4xp · GHSA
Track software like this
Free during beta