A critical directory traversal vulnerability in Dokploy allows authenticated users with specific permissions to perform unauthorized file operations on the host system.

The application fails to properly sanitize the certificatePath parameter, which allows an authenticated user with certificate management permissions to escape the intended directory and execute arbitrary file writes or deletions.

Successful exploitation of this flaw allows a malicious actor to overwrite critical system files or delete essential data, potentially leading to a complete compromise of the host server. Given the CVSS score of 9.9, this vulnerability represents an extreme risk to system integrity and availability, as it permits unauthorized administrative-level actions within the application environment.

Immediate Action: Update Dokploy to version 0.29.13 or later immediately to apply the necessary path validation fixes.

Proactive Monitoring: Review audit logs for unusual file access patterns or unexpected attempts to modify files outside of the standard application directories.

Compensating Controls: Restrict access to the certificate management interface to the absolute minimum number of trusted users and employ file integrity monitoring on the host to detect unauthorized changes.

Public Exploit Available: Unknown

This vulnerability presents a severe risk to the host environment due to the potential for arbitrary file manipulation. Organizations should prioritize patching to version 0.29.13 immediately to mitigate the risk of host compromise.