PT-2026-44904 · Dokploy · Dokploy

Alcls01111 · CVE-2026-45663 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dokploy versions prior to 0.29.2

Description An authenticated user can execute arbitrary OS commands on the host system through the Docker file upload functionality. The issue occurs because the destinationPath parameter is not properly sanitized and is directly interpolated into a shell command string. By using shell metacharacters such as ; or ", an attacker can escape the intended docker cp command.

Recommendations Update to version 0.29.2 or later. As a temporary workaround, restrict access to the Docker file upload functionality for untrusted authenticated users.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-45663

GHSA-9M66-74X3-5MWR

Affected Products

Dokploy

References · 6

• 🔥 https://github.com/Dokploy/dokploy/security/advisories/GHSA-9m66-74x3-5mwr · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45663.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-45663 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45663 · Security Note
• https://twitter.com/integ_sec/status/2067989021163217126 · Twitter Post
• https://t.me/cveNotify/209145 · Telegram Post