A critical authorization bypass in Dokploy enables authenticated users to escalate privileges and execute commands as root, leading to full host compromise.

The flaw exists within the schedule management API, where improper authorization checks allow an authenticated member to attach their application to a schedule and run scripts as root. This bypasses intended access controls for non-administrative users.

An attacker with minimal access can leverage this flaw to gain root-level control over the underlying server. This total compromise could result in the theft of sensitive data, modification of application environments, or persistent access to the infrastructure. The 9.9 CVSS score reflects the high impact of a root-level privilege escalation.

Immediate Action: Update Dokploy to version 0.29.13 or later immediately to resolve the authorization logic flaw.

Proactive Monitoring: Review audit logs for suspicious activity related to the schedule API and monitor for unexpected process execution with root privileges.

Compensating Controls: Implement strict access control lists for users within the Dokploy environment and limit user roles to the minimum necessary for their function.

Public Exploit Available: No (unknown)

This vulnerability presents a severe risk due to the potential for root escalation. Organizations using Dokploy should perform an immediate update to version 0.29.13 and audit their user permissions to ensure no unauthorized activities have already occurred.