CVE-2026-45630

CVSS Score & Metrics

Base Score

9.0 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L                                    

Vulnerability Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows admin/owner users to execute arbitrary system commands on remote servers via unsanitized echo shell interpolation.

Vulnerability Details

Published Date

May 29, 2026

Last Modified

June 01, 2026

CWE ID

CWE-78

Source

NVD

Vendor

Dokploy

Product

dokploy

External References

https://github.com/Dokploy/dokploy/security/advisories/GHSA-p787-6gqg-cvp5

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment