A critical OS command injection vulnerability in Dokploy allows authenticated attackers to execute arbitrary system commands, leading to a full compromise of the underlying host server.

The vulnerability exists due to improper neutralization of user-controlled input when building SSH commands, allowing an authenticated user to inject malicious shell commands that are executed with the privileges of the Dokploy service.

An attacker who successfully exploits this vulnerability gains full control over the host server where Dokploy is running. This allows for total system compromise, data theft, and the ability to pivot into other parts of the internal infrastructure, justifying the 9.9 CVSS severity rating.

Immediate Action: Upgrade Dokploy to version 0.29.13 or later to ensure proper input sanitization is applied to SSH-related commands.

Proactive Monitoring: Monitor system process logs for suspicious commands executed by the service account user and look for unauthorized changes to SSH configuration files.

Compensating Controls: Restrict access to the service deployment feature to only highly trusted individuals and ensure the application is containerized with restricted filesystem permissions.

Public Exploit Available: Unknown

This is a high-severity command injection flaw that requires immediate attention. Organizations must upgrade to the patched version as soon as possible to prevent potential unauthorized system-level code execution.