CVE-2026-72865 in Dokploy
Summary
by MITRE • 08/10/2026
Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the compose.update operation stores an unvalidated composePath that packages/server/src/utils/builders/compose.ts and packages/server/src/services/compose.ts interpolate into docker compose -f, docker stack deploy -c, and touch shell commands executed through /bin/sh -c. An authenticated member with compose write and deploy permission can supply a crafted composePath, trigger compose.deploy or startCompose, and execute arbitrary operating-system commands in the Docker-privileged Dokploy host context. This issue is fixed in version 0.29.13.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/10/2026
The vulnerability identified in Dokploy versions prior to 02913 represents a critical command injection flaw that exploits improper input validation within the compose update functionality. This weakness allows authenticated attackers with specific permissions to execute arbitrary operating system commands on the host system where Dokploy operates, creating a severe escalation path for privilege abuse. The vulnerability stems from the application's failure to properly validate and sanitize user-supplied composePath parameters before incorporating them into shell command executions.
The technical implementation of this flaw occurs in two primary locations within the codebase: packages/server/src/utils/builders/compose.ts and packages/server/src/services/compose.ts where unvalidated composePath values are interpolated directly into shell commands. When an authenticated user with compose write and deploy permissions invokes either compose.deploy or startCompose operations, the system processes the malicious composePath through shell command execution flows that utilize /bin/sh -c for command invocation. This interpolation pattern creates a classic command injection vulnerability where attacker-controlled input becomes part of executable shell commands without proper sanitization or escaping mechanisms.
The operational impact of this vulnerability extends beyond simple privilege escalation to encompass complete system compromise of the Docker-privileged host environment. An attacker with minimal permissions can leverage this flaw to execute arbitrary OS commands with the privileges of the Dokploy service account, potentially leading to unauthorized access to sensitive data, persistence mechanisms, lateral movement within network infrastructure, or complete system takeover. The vulnerability affects the core PaaS functionality by compromising the isolation guarantees typically provided by containerization, as the host-level command execution bypasses normal container security boundaries.
This vulnerability maps directly to CWE-78, which specifically addresses OS Command Injection, and aligns with ATT&CK technique T1059.004 for command and scripting interpreter. The attack surface is particularly concerning given that Dokploy's architecture requires Docker privileges for proper operation, meaning any successful exploitation results in elevated system access. Security controls such as input validation, output encoding, and privilege separation should have prevented this issue from manifesting. Organizations using affected versions of Dokploy are recommended to immediately implement the patched version 0.29.13 and review their permission models to ensure least-privilege principles are enforced. Additionally, implementing proper input sanitization and command execution validation would provide defense-in-depth against similar vulnerabilities in other components of the system.
The remediation approach focuses on validating and sanitizing all user-provided composePath inputs before they can be interpolated into shell commands. This involves implementing strict parameter validation, using safe command execution patterns that avoid shell interpolation, or employing dedicated libraries for handling file paths and command construction. Organizations should also consider implementing additional monitoring and logging around critical service endpoints to detect potential exploitation attempts. The fix in version 0.29.13 demonstrates proper input validation implementation that prevents the malicious composePath from being processed through unsafe shell command execution flows, thereby maintaining system integrity and user data protection.