VYPR
← All advisories
Critical severity9.0NVD Advisory· Published May 29, 2026· Updated Jun 1, 2026

CVE-2026-45630

CVE-2026-45630

Description

Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.28.8 and earlier, authenticated OS command injection in the application.updateTraefikConfig tRPC endpoint allows admin/owner users to execute arbitrary system commands on remote servers via unsanitized echo shell interpolation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Dokploy/Dokployinferred2 versions
    <=0.28.8+ 1 more
    • (no CPE)range: <=0.28.8
    • (no CPE)range: <=0.28.8

Patches

Vulnerability mechanics

References

1

News mentions

1