CVE-2026-72866

Received Received - Intake

Unauthorized Terminal Access in Dokploy

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: GitHub, Inc.

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the WebSocket handler in apps/dokploy/server/wss/terminal.ts validates a session but does not authorize access to the requested server. An authenticated user can connect to /terminal?serverId=local, select the special serverId=local branch, and obtain an interactive terminal on the Dokploy host without an organization role or server-access check. This issue is fixed in version 0.29.13.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-10

Last Modified

2026-08-10

Generated

2026-08-11

AI Q&A

2026-08-11

EPSS Evaluated

N/A

NVD

CVE-2026-72866

EUVD

EUVD-2026-55724

Affected Vendors & Products

Vendor	Product	Version / Range
dokploy	dokploy	to 0.29.13 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability in Dokploy before version 0.29.13 allows an authenticated user to gain unauthorized access to an interactive terminal on the Dokploy host. The WebSocket handler validates the session but fails to check if the user has the required organization role or server access permissions. By exploiting a special serverId=local parameter, an attacker can bypass authorization and execute commands on the host system.

Detection Guidance

Check Dokploy version with: dokploy --version. If version is below 0.29.13, the system is vulnerable. Monitor for unauthorized terminal sessions or unexpected server access attempts.

Impact Analysis

An attacker with authenticated access could gain full control over the Dokploy host system, allowing them to execute arbitrary commands, access sensitive data, or disrupt services. This could lead to data breaches, system compromise, or unauthorized modifications to the hosting environment.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential data exposure.

Mitigation Strategies

Upgrade Dokploy to version 0.29.13 or later immediately. Review user roles and server access permissions to ensure only authorized users have terminal access.

Hi! I’m here to help you understand CVE-2026-72866. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70