CVE-2026-72734

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-72734
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72734.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-72734
Aliases
  • GHSA-3rpx-c3j9-q99x
Published
2026-08-10T17:29:30.298Z
Modified
2026-08-12T04:19:24.570124935Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L CVSS Calculator
Summary
Dokploy: Cross-organization authorization bypass in server.remove allows deletion of another organization's server registration
Details

Dokploy is a free, self-hostable Platform as a Service (PaaS). From 0.28.7 until 0.29.13, the server.remove tRPC mutation in apps/dokploy/server/api/routers/server.ts accepts a caller-controlled serverId and calls haveActiveServices, findServerById, removeDeploymentsByServerId, and deleteServer without verifying that currentServer.organizationId equals ctx.session.activeOrganizationId. An authenticated owner or administrator with server:delete in one organization who previously observed another organization's serverId can delete that organization's server registration and deployment records, interrupt Dokploy management, and receive the associated plaintext SSH private key even though server.one denies the same cross-organization read. This issue is fixed in version 0.29.13.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72734.json",
    "cwe_ids": [
        "CWE-639"
    ]
}
References

Affected packages

Git / github.com/dokploy/dokploy

Affected ranges

Type
GIT
Repo
https://github.com/dokploy/dokploy
Events
Introduced
9067452a38006f4c71a71b33ad2b0e229bef3eb0
Fixed
4aee66b2d1dc2c027749a541e553aa49947075c1
Fixed
8b868c66d6672be40b86315a704ea1b3b09cb2d3
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0.28.7"
        },
        {
            "fixed": "0.29.13"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-72734.json"