CVE-2026-45790

Received Received - Intake

Privileged Role Escalation in Dokploy

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: GitHub, Inc.

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.6, Dokploy's organization.inviteMember tRPC procedure in apps/dokploy/server/api/routers/organization.ts allows a user with member:create permission to invite an account with the owner role, while packages/server/src/services/user.ts allows a privileged self-hosted user to create an account with an arbitrary role, enabling permanent organization takeover because owner roles cannot be demoted. This issue is fixed in version 0.29.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-17

Last Modified

2026-08-17

Generated

2026-08-18

AI Q&A

2026-08-18

EPSS Evaluated

N/A

NVD

CVE-2026-45790

Affected Vendors & Products

Vendor	Product	Version / Range
dokploy	dokploy	to 0.29.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

Dokploy before version 0.29.6 has a vulnerability where a user with member:create permission can invite another account with the owner role. Additionally, a privileged self-hosted user can create an account with any role. This allows an attacker to gain owner privileges, which cannot be revoked, leading to permanent takeover of the organization.

Detection Guidance

This vulnerability can be detected by checking the Dokploy version installed on your system. If you are running a version prior to 0.29.6, your system is vulnerable. Run the following command to check the version: dokploy --version. Additionally, review user roles in your Dokploy organization to ensure no unauthorized owner role assignments exist.

Impact Analysis

If exploited, this vulnerability allows an attacker to gain full control of your Dokploy organization. They can manage all resources, access sensitive data, and make unauthorized changes. This could lead to data breaches, service disruption, or complete loss of control over your infrastructure.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements. Organizations may face legal penalties, loss of compliance certifications, and reputational damage due to data breaches resulting from this flaw.

Mitigation Strategies

Upgrade Dokploy to version 0.29.6 or later to address the vulnerability. Review user roles and permissions to ensure no unauthorized accounts have owner privileges. Remove any suspicious accounts with owner roles that were not legitimately assigned.

Hi! I’m here to help you understand CVE-2026-45790. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70