CVE-2026-129433

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-129433

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-129433.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-129433

Aliases

GHSA-j329-jw7j-rxjm

Published

2026-11-14T12:32:52Z

Modified

2026-11-15T02:46:42Z

Severity

9.4 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CVSS Calculator

Summary

Dokploy before 0.31.1 OS Command Injection via Compose Backup serviceName

Details

Dokploy before 0.31.1 contains an OS command injection vulnerability in getComposeContainerCommand() that allows authenticated organization members to execute shell commands via the serviceName parameter. Attackers can store serviceName values with shell metacharacters through backup.create or backup.update tRPC procedures, executing commands as root when scheduled backups run and taking over the host via the mounted Docker socket.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-78"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/129xxx/CVE-2026-129433.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0.31.1"
                        }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0.31.1"
                        }
                    ],
                    "source": "CPE_FIELD",
                    "strategy": "CPEApplicability"
                }
            ]
        },
        {
            "extracted_events": [
                {
                    "range": [
                        {
                            "fixed": "0.31.1"
                        }
                    ],
                    "source": "DESCRIPTION"
                }
            ]
        }
    ]
}

References

Affected packages

Git / github.com/dokploy/dokploy

Affected ranges

Type

GIT

Repo

https://github.com/dokploy/dokploy

Events

Introduced

Fixed

b24006e16e95a10ce3daf739d06ac783e5c70ba0

Fixed

68dd5fa59d2218dc39c1e732e3c72c426293839c

Database specific

Show details

{
    "extracted_events": [
        {
            "range": [
                {
                    "fixed": "b24006e16e95a10ce3daf739d06ac783e5c70ba0"
                }
            ],
            "source": "REFERENCES_COMMIT"
        },
        {
            "original_tag": "v0.31.1",
            "range": [
                {
                    "fixed": "68dd5fa59d2218dc39c1e732e3c72c426293839c"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.4

v0.1.0

v0.10.0

v0.10.1

v0.10.10

v0.10.2

v0.10.3

v0.10.4

v0.10.5

v0.10.6

v0.10.7

v0.10.9

v0.11.0

v0.11.1

v0.11.2

v0.12.0

v0.13.0

v0.13.1

v0.14.0

v0.14.1

v0.15.0

v0.15.1

v0.16.0

v0.16.1

v0.17.0

v0.17.1

v0.17.2

v0.17.3

v0.2.1

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.29.10

v0.29.11

v0.29.12

v0.29.13

v0.29.14

v0.29.7

v0.29.8

v0.29.9

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.30.0

v0.30.1

v0.30.10

v0.30.2

v0.30.3

v0.30.4

v0.30.5

v0.30.6

v0.30.7

v0.30.8

v0.30.9

v0.31.0

v0.4.0

v0.5.0

v0.5.1

v0.6.0

v0.6.1

v0.6.2

v0.6.3

v0.7.0

v0.7.1

v0.7.2

v0.7.3

v0.8.0

v0.8.1

v0.8.2

v0.8.3

v0.9.0

v0.9.1

v0.9.2

v0.9.3

v0.9.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-129433.json"