An authenticated command injection vulnerability in Dokploy allows attackers to execute arbitrary system commands, posing a severe risk of host-level compromise.

This is a command injection vulnerability (CWE-77) occurring when the application uses unquoted template literal interpolation to pass user input to shell commands via the execAsyncRemote function. The vulnerability is restricted to authenticated users with access to specific management endpoints.

With a CVSS score of 9.9, this vulnerability represents a critical risk to the host environment. An authenticated attacker can escalate their privileges, gain full control over the container host, and potentially pivot into other internal network segments, resulting in catastrophic data loss or system failure.

Immediate Action: Update the Dokploy installation to version 0.29.13 or higher to apply the necessary input sanitization fixes.

Proactive Monitoring: Monitor server logs for unusual shell process executions or unexpected SSH activity originating from the Dokploy service account.

Compensating Controls: Implement strict network segmentation and apply the principle of least privilege to user accounts to limit the potential impact of an authenticated attacker.

Public Exploit Available: No (exploit_available: unknown)

Administrators must update to version 0.29.13 immediately to resolve this command injection flaw. Given the ability of an authenticated attacker to compromise the host operating system, this update should be treated as a high-priority maintenance task.