{"id":"CVE-2026-72868","aliases":["EUVD-2026-55726","GHSA-f6x8-vfwh-8hjr"],"status":"published","title":"Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection","description":"Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, endpoint, provider, and bucket fields from destination.testConnection into an rclone ls command executed through child_process.exec. The `withPermission(\"destination\", \"create\")` path permits a low-privileged organization member to reach the mutation, close a quoted argument with a crafted field, and execute arbitrary commands in the root Dokploy container, which has access to the host Docker socket. This issue is fixed in version 0.29.13.","severity":{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00707,"percentile":0.53893,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78","CWE-862"],"published":"2026-08-10T18:39:08Z","modified":"2026-11-11T02:49:08Z","products":[{"vendor":"dokploy","product":"dokploy"}],"references":[{"url":"https://github.com/Dokploy/dokploy/security/advisories/GHSA-f6x8-vfwh-8hjr","tags":["x_refsource_CONFIRM","advisory"]},{"url":"https://github.com/Dokploy/dokploy/pull/4873","tags":["x_refsource_MISC","fix"]},{"url":"https://github.com/Dokploy/dokploy/commit/eeb6e7b8ea88e4b4b1fac8460755464100516ac9","tags":["x_refsource_MISC","fix"]},{"url":"https://github.com/Dokploy/dokploy/releases/tag/v0.29.13","tags":["x_refsource_MISC","web"]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/10/2","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72868.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72868","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-72868","title":"Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection","description":"Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, endpoint, provider, and bucket fields from destination.testConnection into an rclone ls command executed through child_process.exec. The `withPermission(\"destination\", \"create\")` path permits a low-privileged organization member to reach the mutation, close a quoted argument with a crafted field, and execute arbitrary commands in the root Dokploy container, which has access to the host Docker socket. This issue is fixed in version 0.29.13.","status":"published","published":"2026-08-10T18:39:08.724Z","modified":"2026-11-10T05:04:52.962Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-78","CWE-862"],"updated_at":"2026-11-10T06:37:20.402316Z"}],"euvd":[{"id":"EUVD-2026-55726","description":"Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, endpoint, provider, and bucket fields from destination.testConnection into an rclone ls command executed through child_process.exec. The `withPermission(\"destination\", \"create\")` path permits a low-privileged organization member to reach the mutation, close a quoted argument with a crafted field, and execute arbitrary commands in the root Dokploy container, which has access to the host Docker socket. This issue is fixed in version 0.29.13.","status":"published","published":"2026-08-10T18:39:08Z","modified":"2026-11-10T05:04:52Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-10T06:20:06.342465Z"}],"nvd":[{"id":"CVE-2026-72868","description":"Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, endpoint, provider, and bucket fields from destination.testConnection into an rclone ls command executed through child_process.exec. The `withPermission(\"destination\", \"create\")` path permits a low-privileged organization member to reach the mutation, close a quoted argument with a crafted field, and execute arbitrary commands in the root Dokploy container, which has access to the host Docker socket. This issue is fixed in version 0.29.13.","status":"published","published":"2026-08-10T19:17:35.6Z","modified":"2026-11-10T05:18:07.08Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-78","CWE-862"],"updated_at":"2026-11-10T07:18:21.493308Z"}],"osv":[{"id":"CVE-2026-72868","title":"Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection","description":"Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey, region, endpoint, provider, and bucket fields from destination.testConnection into an rclone ls command executed through child_process.exec. The `withPermission(\"destination\", \"create\")` path permits a low-privileged organization member to reach the mutation, close a quoted argument with a crafted field, and execute arbitrary commands in the root Dokploy container, which has access to the host Docker socket. This issue is fixed in version 0.29.13.","status":"published","published":"2026-08-10T18:39:08.724Z","modified":"2026-11-11T02:49:08.954812362Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-78","CWE-862"],"updated_at":"2026-11-11T03:21:13.402158Z"}]}}