An authenticated OS command injection vulnerability in the backup restoration feature of Dokploy versions prior to 0.29.13 allows attackers to gain full control over the host system.

This is an OS command injection vulnerability (CWE-78) where user-provided input in the backup restore process is not properly sanitized before being passed to shell pipelines. An authenticated user with backup-restore permissions can inject arbitrary commands that execute in the context of the host server.

The vulnerability allows for full host-level command execution, which is critical given the CVSS score of 9.9. Successful exploitation results in complete system compromise, enabling attackers to extract sensitive data, deploy persistent backdoors, or disrupt service availability for the entire platform.

Immediate Action: Upgrade to Dokploy version 0.29.13 or later, which includes the necessary input sanitization to prevent command injection.

Proactive Monitoring: Monitor the system for unusual child processes being spawned by the Dokploy backup service or unexpected outbound network connections.

Compensating Controls: Restrict access to the backup-restore functionality to only the most trusted administrative accounts until the patch is applied.

Public Exploit Available: No (exploit_available: false)

The severity of this flaw requires immediate remediation. All Dokploy users should update to version 0.29.13 immediately to eliminate the risk of host-level command injection via the backup restoration module.