CVE-2026-72863

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, Dokploy's WebSocket handlers (in-app terminals and log streamers) authenticate the session but never authorize it. They establish who the user is via validateRequest() and then proceed without consulting the role/permission model that every tRPC procedure enforces. Any authenticated member, can therefore open an interactive shell into any container on the host, including the dokploy container that mounts the Docker socket, and from there obtain root on the host, escaping the application and crossing every tenant boundary. This vulnerability is fixed in 0.29.13.

• CWE-269
• CWE-639
• CWE-862

• https://github.com/Dokploy/dokploy/commit/68f5afae42fca353dcb3d3bc6219ffe9e168cb91
• https://github.com/Dokploy/dokploy/releases/tag/v0.29.13
• https://github.com/Dokploy/dokploy/security/advisories/GHSA-7r6p-v9gw-pwc8
• https://github.com/Dokploy/dokploy/security/advisories/GHSA-7r6p-v9gw-pwc8

Published

Aug 10, 2026

Last Modified

Aug 10, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7280AVACAST developed by eMPIA Technology has a Unquoted Service…8.4
• CVE-2026-7281A vulnerability was determined in SourceCodester Pharmacy Sa…2.4
• CVE-2026-7282A vulnerability was identified in SourceCodester Pharmacy Sa…4.7
• CVE-2026-7283A security flaw has been discovered in SourceCodester Pharma…4.7
• CVE-2026-7284The Easy Elements for Elementor – Addons & Website Templates…9.8
• CVE-2026-72862Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72864Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72865Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72866Dokploy is a free, self-hostable Platform as a Service (PaaS…8.8
• CVE-2026-72867Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72868Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9
• CVE-2026-72869Dokploy is a free, self-hostable Platform as a Service (PaaS…9.9