CVE-2026-45661
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
A critical path traversal vulnerability in Dokploy 0.26.5 and earlier. Authenticated users can write arbitrary files during deployment, which combined with remote server feature enables remote code execution and full server compromise.
Risk Assessment
An attacker can take over remote servers, install backdoors, exfiltrate data, and bypass container isolation.
Recommendation
Update Dokploy to the latest version that fixes this vulnerability. Restrict deployment access to trusted users only.
Original NVD description (English source)
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that allows authenticated users to write arbitrary files to the filesystem during application deployment. When combined with Dokploy's remote server deployment feature, this vulnerability enables arbitrary file write to remote server filesystems, automatic remote code execution via cron jobs, complete server compromise, data exfiltration without user interaction, and persistent backdoor installation. This vulnerability bypasses all container isolation on remote server deployments.