CVE-2026-116068

Description

Dokploy through 0.30.10 contains an authorization bypass vulnerability that allows owners or admins of any organization to control other tenants' applications by supplying foreign applicationId values. Attackers can call procedures like saveEnvironment, updateTraefikConfig, deploy, or stop to overwrite environment variables and build secrets, repoint sources, and disrupt other tenants' applications.

References

https://www.vulncheck.com/advisories/dokploy-through-0.30.10-cross-organization-authorization-bypass-via-application-trpc-router

https://github.com/Dokploy/dokploy/issues/5635

https://github.com/Dokploy/dokploy/commit/b3cd3c5061b9e4f9a786dc4a048765f79bae2523

https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/packages/server/src/services/permission.ts#L244-L261

https://github.com/Dokploy/dokploy/blob/073713f0b863eca4285ad24db00550af1b39397a/apps/dokploy/server/api/routers/application.ts#L490-L501

https://github.com/Dokploy/dokploy

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

CVSS v4