CVE-2026-45631

CriticalCVSS 10.0

Published: 29/05/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

28th percentile - higher than 28% of all known CVEs

Summary

Dokploy versions 0.27.0 through 0.29.3 contain a hardcoded BETTER_AUTH_SECRET fallback ("better-auth-secret-123456789"), allowing an unauthenticated attacker to forge email verification JWTs, trigger auto-sign-in as admin, and execute commands on the host via the built-in SSH terminal.

Risk Assessment

An attacker can gain full control over the Dokploy server, accessing all managed applications and data, and execute arbitrary commands on the host system.

Recommendation

Immediately upgrade Dokploy to version 0.29.3 or later, which fixes this vulnerability.

Original NVD description (English source)

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.27.0 to before 0.29.3, a hardcoded BETTER_AUTH_SECRET fallback ("better-auth-secret-123456789") lets an unauthenticated attacker forge email verification JWTs, trigger auto-sign-in as admin, and execute commands on the host via the built-in SSH terminal. This vulnerability is fixed in 0.29.3.