CVE-2026-116068: Dokploy through 0.30.10 Cross-Organization Authorization Bypass via Application tRPC Router
Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to overwrite environment variables and build secrets, repoint sources, and disrupt other tenants' applications.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An owner or administrator of any Dokploy organization can exploit it. The flaw allows that authenticated tenant-level user to act on applications belonging to other organizations.
What access and conditions are required for exploitation?
The attacker needs network access to Dokploy, valid owner or administrator privileges in any organization, and a foreign applicationId for a target application. No user interaction is required.
What impact can an attacker have on another tenant's application?
An attacker can invoke application procedures including saveEnvironment, updateTraefikConfig, deploy, and stop against another tenant's application. This can overwrite environment variables and build secrets, repoint sources, deploy changes, or disrupt application availability.
Which versions are affected?
Dokploy through version 0.30.10 is affected. The provided information does not identify a fixed version or a workaround.