CVE-2026-45632
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
Dokploy in 0.26.7 and earlier does not enforce organization/role checks in the schedule router. Any authenticated user can create, update, run, or delete schedules of other organizations if they know the scheduleId/serverId. Schedule types server and dokploy-server enable code execution on the host or remote server (RCE).
Risk Assessment
An attacker could execute arbitrary code on the Dokploy host or target server, leading to full compromise.
Recommendation
Update Dokploy to a version later than 0.26.7.
Original NVD description (English source)
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.7 and earlier, the schedule router does not enforce organization/role checks. As a result, any authenticated user can create, update, run, or delete schedules belonging to other organizations if they know the scheduleId/serverId. Schedule types server and dokploy-server write and execute scripts on the host or remote servers, enabling RCE on the Dokploy host or a target server.