What is the CVSS score of CVE-2026-72862?

CVE-2026-72862 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Dokploy are affected by CVE-2026-72862?

Dokploy self-hosted deployments (versions prior to 0.29.13) contain a critical command injection vulnerability allowing administrators to execute arbitrary commands on all managed remote…. A patch is available.

How to fix or mitigate CVE-2026-72862?

Within 24 hours, audit and restrict database-service provisioning privileges to a minimal set of trusted administrators, and enable comprehensive audit logging for all service provisioning requests. Within 7 days, implement network segmentation restricting Dokploy servers' outbound access to only authorized remote database servers, and configure intrusion detection to flag suspicious dockerImage parameters containing shell metacharacters. Within 30 days, monitor for Dokploy version 0.29.13 release, test the upgrade immediately in non-production, and deploy to production instances within 48 hours of validation.

Dokploy CVE-2026-72862

EUVD-2026-55693 CRITICAL

OS Command Injection (CWE-78)

2026-08-10 GitHub_M

Docker PostgreSQL Command Injection Redis Dokploy

9.9

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

Network-reachable dashboard, trivial payload (AC:L), requires an authenticated provisioning account (PR:L), and injected code runs on a separate managed host (S:C) yielding full host compromise (C/I/A:H).

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Aug 10, 2026 - 19:03 EUVD

Source Code Evidence Fetched

Aug 10, 2026 - 18:36 vuln.today

Analysis Generated

Aug 10, 2026 - 18:36 vuln.today

CVE Published

Aug 10, 2026 - 17:59 cve.org

CRITICAL 9.9

DescriptionCVE.org

Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, the mariadb.ts, mongo.ts, mysql.ts, postgres.ts, redis.ts, and libsql.ts Dokploy database service deployment functions pass user-controlled dockerImage fields unquoted into docker pull ${dockerImage} shell commands on the remote-server code path. This vulnerability is fixed in 0.29.13.

Articles & Coverage 2

News 3 Critical PostgreSQL Vulnerabilities Patched - Immediate Update Required Aug 11, 2026 News Critical Command Injection in Dokploy Self-Hosted PaaS (Redis) - CVE-2026-72862 Aug 10, 2026

AnalysisAI

Command injection in Dokploy self-hosted PaaS versions prior to 0.29.13 lets an authenticated user with database-service provisioning rights run arbitrary shell commands on managed remote servers. The user-controlled dockerImage field for PostgreSQL, MySQL, MariaDB, MongoDB, Redis, and libSQL services is interpolated unquoted into a 'docker pull ${dockerImage}' command executed over the remote-server code path (execAsyncRemote), enabling shell metacharacter injection. Rated CVSS 9.9 with a scope change; no public exploit or CISA KEV listing is identified, though the patch ships a regression test demonstrating the injection.

Technical ContextAI

Dokploy is a free, self-hostable Platform-as-a-Service that provisions application and database containers onto managed remote hosts, typically over SSH-backed remote execution. The affected code lives in the server package database deploy functions (mariadb.ts, mongo.ts, mysql.ts, postgres.ts, redis.ts, libsql.ts), each of which built a shell command string 'docker pull ${dockerImage}' and dispatched it to the remote server. Because dockerImage is a user-supplied field with no quoting or validation, shell metacharacters ($(), backticks, ;, &&, |) are interpreted by /bin/sh. This is a classic CWE-78 OS Command Injection: untrusted input reaches a command interpreter without neutralization. The fix wraps the value with shell-quote's quote([dockerImage]) so the image reference is passed as a single safely-escaped token, while legitimate tags like postgres:16.4-alpine and ghcr.io/org/db:latest remain intact.

RemediationAI

Upgrade to Dokploy 0.29.13, which is the vendor-released patch that quotes the dockerImage field via shell-quote before it reaches the docker pull command (release: https://github.com/Dokploy/dokploy/releases/tag/v0.29.13; advisory: https://github.com/Dokploy/dokploy/security/advisories/GHSA-6jrh-8qmg-jj3p). Because exploitation requires an authenticated user who can create or modify database services, interim compensating controls if you cannot patch immediately include restricting which accounts hold database-provisioning permissions to a minimal set of fully trusted operators, disabling self-service database creation for untrusted or multi-tenant users, and auditing existing database service dockerImage values for shell metacharacters ($(), backticks, ;, &&, |). These access restrictions reduce the exposed population but do not close the flaw for privileged users, so they are stopgaps only; the reliable fix is the upgrade. There is no safe configuration workaround that preserves database-provisioning functionality for untrusted users.