CVE-2026-82954: Dokploy Settings application.ts writeTraefikConfigInPath path traversal
A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dokployto a version that resolves this vulnerability.Fixed in 0.29.7 - Configuration
Harden `writeTraefikConfigInPath` in `packages/server/src/utils/traefik/application.ts` to validate the provided `path` argument so it cannot be used for path traversal.
Dokploy Settings (packages/server/src/utils/traefik/application.ts) writeTraefikConfigInPath path argument handling = Reject/validate path traversal sequences (e.g., prevent `..` and absolute-path inputs) before using the argument path
Event History
Frequently Asked Questions
Which deployments are affected?
Dokploy versions up to 0.29.7 are affected. The vulnerable code is in the Settings component's writeTraefikConfigInPath function.
What access does an attacker need to exploit this issue?
The attack can be launched remotely and requires low privileges. No user interaction is required.
Is public exploit code available?
Yes. The exploit is reported as public and may be used.