A flaw in the /listen-deployment WebSocket endpoint of Dokploy versions 0.28.8 and earlier allows an authenticated user to inject operating system commands. The injected commands run with the privileges of the Dokploy daemon on the host, permitting full control of the remote server. This vulnerability is a classic instance of OS Command Injection (CWE-78) and grants attackers immediate confidentiality, integrity, and availability compromise of the entire system.

Dokploy Platform as a Service, version 0.28.8 and earlier, is affected. Any organization member with authentication to the instance can exploit the flaw, regardless of the specific deployment environment. Consequently, every instance running a vulnerable version is at risk.

The CVSS score of 9.9 reflects the severe impact and the fact that the vulnerability requires only authenticated access, which is far less restrictive than many other remote code execution attacks. EPSS data is not available, but the absence of a KEV listing does not mitigate the high likelihood of exploitation in a scenario where users can simply log in. The attack path is straightforward: log in, open a WebSocket to /listen-deployment, and send a crafted payload that is executed on the host. Given the ubiquity of Docker and self‑hosted deployments, this vulnerability is highly actionable.