What is the CVSS score of CVE-2026-72882?

CVE-2026-72882 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

Which versions of Dokploy are affected by CVE-2026-72882?

Dokploy self-hosted PaaS versions 0.28.8 and earlier contain a critical command injection vulnerability allowing authenticated users with service configuration permissions to execute arbitrary…

How to fix or mitigate CVE-2026-72882?

Within 24 hours, inventory all Dokploy deployments and document active versions; immediately restrict administrative and developer access to service file mount creation and update functionality, and review recent audit logs for suspicious configuration changes. Within 7 days, implement network-level controls including SSH key rotation for Dokploy-to-host connections, deploy input validation to block shell metacharacters in filePath parameters, and isolate the Dokploy management host from production networks. Within 30 days, evaluate disabling service file mount functionality as a temporary measure if operationally feasible; conduct a comprehensive security audit of all service configurations created during the vulnerability window; and establish monitoring for vendor patch availability with a documented upgrade plan.

Dokploy CVE-2026-72882

EUVD-2026-55790 CRITICAL

OS Command Injection (CWE-78)

2026-08-10 GitHub_M

Command Injection Dokploy

9.9

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

vuln.today AI

9.9 CRITICAL

Network-reachable web UI (AV:N) with low complexity; authenticated user with file-mount rights gives PR:L; command runs on a different system (managed host) than the control plane, so S:C with full C/I/A impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 10, 2026 - 20:02 vuln.today

CVE Published

Aug 10, 2026 - 19:27 cve.org

CRITICAL 9.9

DescriptionCVE.org

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, an authenticated user who can create or update file mounts for a service can inject shell metacharacters into filePath, causing Dokploy to execute attacker-controlled commands on the configured remote managed server over SSH. In the default deployment model, this yields direct remote host RCE from the web interface.

AnalysisAI

OS command injection in Dokploy (self-hosted PaaS) version 0.28.8 and earlier lets an authenticated user with permission to create or update service file mounts inject shell metacharacters via the filePath field, which Dokploy passes to the managed remote server over SSH. Because the default deployment model runs deployments directly against the configured host, this escalates from a web-UI form field to direct remote-host RCE. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the near-maximum CVSS of 9.9 (scope-changed) reflects the severity of the primitive.

Technical ContextAI

Dokploy is an open-source, self-hostable Platform-as-a-Service (a Heroku/Vercel-style deployment control plane) that manages application deployments on remote servers over SSH. The flaw is a classic CWE-78 (Improper Neutralization of Special Elements used in an OS Command) issue: the filePath value supplied when configuring a service file mount is incorporated into a shell command that Dokploy executes on the target managed server without sanitizing or escaping shell metacharacters (e.g. ;, |, $(), backticks). The single affected CPE is cpe:2.3:a:dokploy:dokploy:*, i.e. the Dokploy application itself; the injected command runs in the context Dokploy uses to manage the remote host over SSH, which in the default model is the deployment host itself.

RemediationAI

Upgrade Dokploy to the fixed release identified in GitHub Security Advisory GHSA-qcf5-jjjp-7794 (https://github.com/Dokploy/dokploy/security/advisories/GHSA-qcf5-jjjp-7794); the advisory is published (patch available per vendor advisory) but the exact fixed version was not included in the input data and must be read from the advisory. Until patched, reduce exposure by tightly restricting which accounts can create or update service file mounts (treat that permission as equivalent to remote shell on the managed host), removing untrusted or unnecessary users from projects, and placing the Dokploy web interface behind a VPN or IP allowlist so it is not directly internet-facing - the trade-off is reduced convenience for distributed teams. Monitor deployment/SSH command logs on managed servers for unexpected shell metacharacters or anomalous commands as a detection control. Avoid ad-hoc input filtering on filePath as a substitute for the vendor fix, since blacklist-style metacharacter filtering is easily bypassed.