CVE-2026-72864

Received Received - Intake

Docker Container Terminal Auth Bypass in Dokploy

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: GitHub, Inc.

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the local branch of /docker-container-terminal in apps/dokploy/server/wss/docker-container-terminal.ts authenticates with validateRequest but does not authorize the attacker-controlled containerId against the caller's role, organization, or service access before passing it to `docker exec`, allowing any authenticated member to obtain a root shell in arbitrary containers on a self-hosted instance. This issue is fixed in version 0.29.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2026-72864

EUVD

EUVD-2026-55722

Affected Vendors & Products

Vendor	Product	Version / Range
dokploy	dokploy	0.29.13

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

Dokploy before version 0.29.13 has an authentication bypass in the Docker container terminal feature. The system checks authentication but fails to verify if the user has permission to access the specific container they are trying to control. This allows any authenticated user to execute arbitrary commands, including obtaining a root shell, in any container on the system.

Detection Guidance

Check Dokploy version with: curl -s http://localhost:3000/api/version | grep version. If version is below 0.29.13, the system is vulnerable. Inspect logs for unauthorized docker exec commands targeting arbitrary containers.

Impact Analysis

If you use Dokploy for self-hosting applications, an attacker with valid credentials could gain full control over any container on your system. This could lead to data theft, service disruption, or further compromise of your infrastructure. The impact is severe due to the potential for root-level access.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA. Organizations using Dokploy may face compliance violations, legal penalties, and reputational damage if exploited. Immediate patching is recommended to maintain compliance.

Mitigation Strategies

Upgrade Dokploy to version 0.29.13 or later immediately. Review and restrict user roles and permissions to prevent unauthorized access. Monitor container activity for suspicious docker exec commands.

Hi! I’m here to help you understand CVE-2026-72864. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70