An authenticated OS command injection vulnerability in Dokploy allows attackers to execute arbitrary code on remote managed servers, leading to remote host compromise.

The application fails to properly sanitize the filePath parameter when configuring file mounts for services. An authenticated user can inject malicious shell metacharacters, resulting in OS command injection that executes with the privileges of the Dokploy service on the target host.

The ability to execute commands on remote managed servers via the web interface provides an attacker with a direct path to host-level exploitation. With a CVSS score of 9.9, this vulnerability severely undermines the security of the entire infrastructure managed by Dokploy. Unauthorized command execution can lead to complete system takeover and the compromise of all hosted data.

Immediate Action: Verify if a vendor-supplied patch is available for your specific deployment and apply it immediately; if no patch is currently available, restrict access to the file mount configuration interface.

Proactive Monitoring: Review SSH logs on managed servers for suspicious command execution patterns or unexpected connections from the Dokploy host.

Compensating Controls: Utilize a Web Application Firewall to block requests containing shell metacharacters in the filePath input field.

Public Exploit Available: No

This vulnerability is a high-risk entry point for remote code execution. Administrators should audit all service file mount configurations and restrict access to these settings until a verified patch can be applied.