VYPR
← All advisories
Critical severity9.9NVD Advisory· Published May 29, 2026· Updated Jun 2, 2026

CVE-2026-45629

CVE-2026-45629

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the /listen-deployment WebSocket endpoint allows any organization member to execute arbitrary system commands on remote servers managed by Dokploy, leading to full server compromise.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Dokploy/Dokployinferred2 versions
    <=0.28.8+ 1 more
    • (no CPE)range: <=0.28.8
    • (no CPE)range: <=0.28.8

Patches

Vulnerability mechanics

References

1

News mentions

1